mirror of
https://git.mirrors.martin98.com/https://github.com/Ultimaker/Cura
synced 2025-08-12 05:49:03 +08:00
build: harden conan-package.yml permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
parent
6213c95bbc
commit
7e218bef8b
10
.github/workflows/conan-package.yml
vendored
10
.github/workflows/conan-package.yml
vendored
@ -47,13 +47,20 @@ on:
|
||||
- '[1-9].[0-9].[0-9]+'
|
||||
- '[1-9].[0-9][0-9].[0-9]+'
|
||||
|
||||
permissions: {}
|
||||
jobs:
|
||||
conan-recipe-version:
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
uses: ultimaker/cura/.github/workflows/conan-recipe-version.yml@main
|
||||
with:
|
||||
project_name: cura
|
||||
|
||||
conan-package-export:
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
needs: [ conan-recipe-version ]
|
||||
uses: ultimaker/cura/.github/workflows/conan-recipe-export.yml@main
|
||||
with:
|
||||
@ -65,6 +72,9 @@ jobs:
|
||||
secrets: inherit
|
||||
|
||||
conan-package-create-linux:
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
if: ${{ (github.event_name == 'push' && (github.ref_name == 'main' || github.ref_name == 'master' || needs.conan-recipe-version.outputs.is_release_branch == 'true')) || (github.event_name == 'workflow_dispatch' && inputs.create_binaries_linux) }}
|
||||
needs: [ conan-recipe-version, conan-package-export ]
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user