Narrow permissions for actions which don't need read-all

FORCE_TEST_ACTIONS PiperOrigin-RevId: 660584409
openxla · Aug 7, 2024 · 5daef5d · 5daef5d
1 parent 56d83b8
commit 5daef5d
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 3 deletions.
diff --git a/.github/workflows/buildifier.yml b/.github/workflows/buildifier.yml
@@ -13,7 +13,8 @@
 # limitations under the License.
 # ============================================================================
 name: Buildifier
-permissions: read-all
+permissions:
+  contents: read
 on:
   pull_request:
 

diff --git a/.github/workflows/check_contents.yml b/.github/workflows/check_contents.yml
@@ -19,7 +19,8 @@
 # files once XLA moves out of Tensorflow internally.
 # TODO(ddunleavy): Update this after METADATA files are consolidated.
 name: Check Contents
-permissions: read-all
+permissions:
+  contents: read
 on:
   pull_request:
 

diff --git a/.github/workflows/clang_format.yml b/.github/workflows/clang_format.yml
@@ -14,7 +14,8 @@
 # ============================================================================
 
 name: Clang Format
-permissions: read-all
+permissions:
+  contents: read
 on:
   pull_request: