commit 78f732cfdd65bccc76d7da2ae103e141e5ca5742
author Yann Collet <Cyan4973@users.noreply.github.com> Thu Mar 21 13:56:20 2024 -0700
committer GitHub <noreply@github.com> Thu Mar 21 13:56:20 2024 -0700
tree 1d0c369da267aca0921dfe2f16dfee5404abe20b
parent c6e52572405e160ef25780cb5cc8244fdddb90ae
parent 273d1279cab66ac9bccc862da17e35ee547d7610

Merge pull request #3985 from facebook/scorecard_permission

try to silence some scorecard warnings

.github/workflows/commit.yml

diff --git a/.github/workflows/commit.yml b/.github/workflows/commit.yml
index 5fc8cb1..25d8c52 100644
--- a/.github/workflows/commit.yml
+++ b/.github/workflows/commit.yml
@@ -3,6 +3,7 @@
   push:
     branches:
     - dev
+permissions: read-all
 jobs:
   short-tests-0:
     runs-on: ubuntu-latest

.github/workflows/nightly.yml

diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index 9206a07..704e789 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -7,6 +7,7 @@
     - release
     - dev
     - master
+permissions: read-all
 jobs:
   regression-test:
     runs-on: ubuntu-latest