chore: scope GITHUB_TOKEN to contents: read in workflows

chore: pin GitHub Actions to commit SHAs (#1698 )
2026-07-25 02:50:04 +02:00 · 2026-05-13 02:29:49 +01:00 · 2026-05-11 22:12:00 -03:00
1 changed files with 5 additions and 2 deletions
@@ -4,6 +4,9 @@ on:
  push:
  pull_request:

+permissions:
+  contents: read
+
 jobs:
  tests:
    if: github.event_name != 'schedule' || github.repository == 'pestphp/pest'
@@ -21,10 +24,10 @@ jobs:

    steps:
    - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

    - name: Setup PHP
-      uses: shivammathur/setup-php@v2
+      uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # v2
      with:
        php-version: ${{ matrix.php }}
        tools: composer:v2
Author	SHA1	Message	Date
nuno maduro	1729a09d7a	chore: scope GITHUB_TOKEN to contents: read in workflows	2026-05-13 02:29:49 +01:00
nuno maduro	ea6d0d8786	chore: pin GitHub Actions to commit SHAs (#1698 )	2026-05-11 22:12:00 -03:00