3D-printing/Cura
1
0
Fork 0
mirror of https://github.com/Ultimaker/Cura.git synced 2025-07-25 15:44:04 -06:00
Code Issues Projects Releases Packages Wiki Activity Actions 10

build: harden conan-package.yml permissions

Browse source 
Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
Alex 2022-09-23 13:22:49 +02:00
parent 6213c95bbc
commit 7e218bef8b
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
.github/workflows/conan-package.yml vendored
View file

@ -47,13 +47,20 @@ on:
- '[1-9].[0-9].[0-9]+' - '[1-9].[0-9].[0-9]+'
- '[1-9].[0-9][0-9].[0-9]+' - '[1-9].[0-9][0-9].[0-9]+'
permissions: {}
jobs: jobs:
conan-recipe-version: conan-recipe-version:
permissions:
contents: read
uses: ultimaker/cura/.github/workflows/conan-recipe-version.yml@main uses: ultimaker/cura/.github/workflows/conan-recipe-version.yml@main
with: with:
project_name: cura project_name: cura
conan-package-export: conan-package-export:
permissions:
contents: read
needs: [ conan-recipe-version ] needs: [ conan-recipe-version ]
uses: ultimaker/cura/.github/workflows/conan-recipe-export.yml@main uses: ultimaker/cura/.github/workflows/conan-recipe-export.yml@main
with: with:
@ -65,6 +72,9 @@ jobs:
secrets: inherit secrets: inherit
conan-package-create-linux: conan-package-create-linux:
permissions:
contents: read
if: ${{ (github.event_name == 'push' && (github.ref_name == 'main' || github.ref_name == 'master' || needs.conan-recipe-version.outputs.is_release_branch == 'true')) || (github.event_name == 'workflow_dispatch' && inputs.create_binaries_linux) }} if: ${{ (github.event_name == 'push' && (github.ref_name == 'main' || github.ref_name == 'master' || needs.conan-recipe-version.outputs.is_release_branch == 'true')) || (github.event_name == 'workflow_dispatch' && inputs.create_binaries_linux) }}
needs: [ conan-recipe-version, conan-package-export ] needs: [ conan-recipe-version, conan-package-export ]