diff --git a/.github/workflows/build-deploy-docs.yml b/.github/workflows/build-deploy-docs.yml index 03bad63..7cfc238 100644 --- a/.github/workflows/build-deploy-docs.yml +++ b/.github/workflows/build-deploy-docs.yml @@ -8,8 +8,12 @@ on: - '.github/workflows/build-deploy-docs.yml' - 'DOCUMENTATION/**' +permissions: {} jobs: build-deploy-docs: + permissions: + contents: write # to push pages branch (peaceiris/actions-gh-pages) + if: github.repository == 'laradock/laradock' runs-on: ubuntu-20.04 concurrency: diff --git a/.github/workflows/main-ci.yml b/.github/workflows/main-ci.yml index 7d59bf1..3fed3b0 100644 --- a/.github/workflows/main-ci.yml +++ b/.github/workflows/main-ci.yml @@ -11,6 +11,9 @@ on: schedule: - cron: '0 0 * * 0' +permissions: + contents: read # to fetch code (actions/checkout) + jobs: build-php: # Don't trigger on schedule event when in a fork