Evgeny Vereshchagin 510afa460a ci: tighten codeql and labeler even more ...

by moving the read permissions to the top level and
granting additional permissions to the specific jobs.
It should help to prevent new jobs that could be added
there eventually from having write access to resources they
most likely would never need.

2021-11-14 10:51:07 +00:00

..

build_test.sh

ci: use the system llvm-11 package on Focal

2021-10-12 08:17:56 +02:00

build_test.yml

ci: mimic the "restricted" mode

2021-11-14 10:41:06 +00:00

cifuzz.yml

ci: mimic the "restricted" mode

2021-11-14 10:41:06 +00:00

codeql-analysis.yml

ci: tighten codeql and labeler even more

2021-11-14 10:51:07 +00:00

coverity.yml

ci: mimic the "restricted" mode

2021-11-14 10:41:06 +00:00

labeler.yml

ci: tighten codeql and labeler even more

2021-11-14 10:51:07 +00:00

linter.yml

ci: mimic the "restricted" mode

2021-11-14 10:41:06 +00:00

mkosi.yml

ci: mimic the "restricted" mode

2021-11-14 10:41:06 +00:00

test_mkosi_boot.py

ci: Detect shell prompt with higher specificity

2021-08-04 11:16:48 +02:00

unit_tests.sh

CI: disable code coverage in GH Action

2021-10-21 00:10:52 +01:00

unit_tests.yml

ci: mimic the "restricted" mode

2021-11-14 10:41:06 +00:00