harden docker workflow permissions

This commit is contained in:
-LAN- 2026-03-28 07:10:55 +08:00
parent e89e83243a
commit e40e0aaed6
No known key found for this signature in database
GPG Key ID: 6BA0D108DED011FF
2 changed files with 6 additions and 0 deletions

View File

@ -12,6 +12,9 @@ on:
tags:
- "*"
permissions:
contents: read
concurrency:
group: build-push-${{ github.head_ref || github.run_id }}
cancel-in-progress: true

View File

@ -8,6 +8,9 @@ on:
- api/Dockerfile
- web/Dockerfile
permissions:
contents: read
concurrency:
group: docker-build-${{ github.head_ref || github.run_id }}
cancel-in-progress: true