WordPress.org
Get WordPress

Make WordPress Core

Changeset 60624

Timestamp:
08/11/2025 04:42:33 PM (3 months ago)
Author:
johnbillion
Message:

Build/Test Tools: Add some further missing permissions to the GitHub Actions workflows.

These permissions are not required for a public repo but are required for a private repo, for example a private fork.

Props johnbillion, desrosj

Follow-up to r60612.

See #63170

Location:
trunk/.github/workflows
Files:
4 edited

Legend:

Unmodified
Added
Removed

  • trunk/.github/workflows/check-built-files.yml

    r60350 r60624  
    4747    if: ${{ github.repository == 'wordpress/wordpress-develop' && ( github.actor != 'dependabot[bot]' || github.event.commits < 2 ) }}
    4848    uses: ./.github/workflows/reusable-check-built-files.yml
     49    permissions:
     50      contents: read

  • trunk/.github/workflows/reusable-upgrade-testing.yml

    r60083 r60624  
    5959  upgrade-tests:
    6060    name: ${{ inputs.wp }} to ${{ inputs.new-version }} / PHP ${{ inputs.php }} with ${{ 'mariadb' == inputs.db-type && 'MariaDB' || 'MySQL' }} ${{ inputs.db-version }}${{ inputs.multisite && ' multisite' || '' }}
    61     permissions: {}
     61    permissions:
     62      contents: read
    6263    runs-on: ${{ inputs.os }}
    6364    timeout-minutes: 20

  • trunk/.github/workflows/upgrade-develop-testing.yml

    r60534 r60624  
    5858    if: ${{ github.repository == 'WordPress/wordpress-develop' }}
    5959    needs: [ build ]
     60    permissions:
     61      contents: read
    6062    strategy:
    6163      fail-fast: false
    … …  
    9193    if: ${{ github.repository != 'WordPress/wordpress-develop' }}
    9294    needs: [ build ]
     95    permissions:
     96      contents: read
    9397    strategy:
    9498      fail-fast: false

  • trunk/.github/workflows/upgrade-testing.yml

    r60534 r60624  
    6060    uses: ./.github/workflows/reusable-upgrade-testing.yml
    6161    if: ${{ github.repository == 'WordPress/wordpress-develop' }}
     62    permissions:
     63      contents: read
    6264    strategy:
    6365      fail-fast: false
    … …  
    9597    uses: ./.github/workflows/reusable-upgrade-testing.yml
    9698    if: ${{ github.repository == 'WordPress/wordpress-develop' }}
     99    permissions:
     100      contents: read
    97101    strategy:
    98102      fail-fast: false
    … …  
    123127    uses: ./.github/workflows/reusable-upgrade-testing.yml
    124128    if: ${{ github.repository == 'WordPress/wordpress-develop' }}
     129    permissions:
     130      contents: read
    125131    strategy:
    126132      fail-fast: false
    … …  
    155161    uses: ./.github/workflows/reusable-upgrade-testing.yml
    156162    if: ${{ github.repository == 'WordPress/wordpress-develop' }}
     163    permissions:
     164      contents: read
    157165    strategy:
    158166      fail-fast: false
    … …  
    183191    uses: ./.github/workflows/reusable-upgrade-testing.yml
    184192    if: ${{ github.repository == 'WordPress/wordpress-develop' }}
     193    permissions:
     194      contents: read
    185195    strategy:
    186196      fail-fast: false
Note: See TracChangeset for help on using the changeset viewer.