[StepSecurity] ci: Harden GitHub Actions (#4551)

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
This commit is contained in:
StepSecurity Bot
2024-12-17 06:20:06 -08:00
committed by GitHub
parent 861ec9c3c6
commit 5362012fdd
9 changed files with 27 additions and 0 deletions

View File

@@ -15,6 +15,9 @@ concurrency:
group: ${{ github.workflow }}-${{ github.ref || github.run_id }}
cancel-in-progress: true
permissions:
contents: read
jobs:
CodeQL-Build: