Add top-level permissions to IncrementVersionNumber (#1692)

mazhelez · web-flow · commit 4b8f96a3c934 · 2025-05-01T13:01:38.000+02:00
Add top-level read permissions to _IncrementVersionNumber_ workflow.
diff --git a/RELEASENOTES.md b/RELEASENOTES.md
@@ -1,3 +1,7 @@
+### Security
+
+- Add top-level permissions for _Increment Version Number_ workflow
+
 ## v7.1
 
 ### Issues
diff --git a/Templates/AppSource App/.github/workflows/IncrementVersionNumber.yaml b/Templates/AppSource App/.github/workflows/IncrementVersionNumber.yaml
@@ -34,6 +34,9 @@ env:
   ALGoOrgSettings: ${{ vars.ALGoOrgSettings }}
   ALGoRepoSettings: ${{ vars.ALGoRepoSettings }}
 
+permissions:
+  contents: read
+
 jobs:
   IncrementVersionNumber:
     needs: [ ]
diff --git a/Templates/Per Tenant Extension/.github/workflows/IncrementVersionNumber.yaml b/Templates/Per Tenant Extension/.github/workflows/IncrementVersionNumber.yaml
@@ -34,6 +34,9 @@ env:
   ALGoOrgSettings: ${{ vars.ALGoOrgSettings }}
   ALGoRepoSettings: ${{ vars.ALGoRepoSettings }}
 
+permissions:
+  contents: read
+
 jobs:
   IncrementVersionNumber:
     needs: [ ]
