(cloudstack-terraform-provider) branch main updated: [StepSecurity] ci: Harden GitHub Actions (#103)

[rohit]

This is an automated email from the ASF dual-hosted git repository.

rohit pushed a commit to branch main
in repository 
https://gitbox.apache.org/repos/asf/cloudstack-terraform-provider.git


The following commit(s) were added to refs/heads/main by this push:
     new e4c9861  [StepSecurity] ci: Harden GitHub Actions (#103)
e4c9861 is described below

commit e4c986131f08ada761ea92c9f9e85c6dab5faa74
Author: StepSecurity Bot <b...@stepsecurity.io>
AuthorDate: Thu Apr 25 21:26:41 2024 -0700

    [StepSecurity] ci: Harden GitHub Actions (#103)
    
    Signed-off-by: StepSecurity Bot <b...@stepsecurity.io>
---
 .github/workflows/build.yml   | 3 +++
 .github/workflows/testacc.yml | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f2acf05..0d13ff5 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -23,6 +23,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || 
github.ref }}
   cancel-in-progress: true
   
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-22.04
diff --git a/.github/workflows/testacc.yml b/.github/workflows/testacc.yml
index e2adc43..2534485 100644
--- a/.github/workflows/testacc.yml
+++ b/.github/workflows/testacc.yml
@@ -23,6 +23,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || 
github.ref }}-testacc
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   testacc:
     name: Acceptance Test