Merge pull request #75 from NHSDigital/task/NPT-959_Create_Route53_domains

soji-kainos-nhs-temp · web-flow · commit 7eae1acb2fe1 · 2026-03-19T13:47:21.000Z
NPT-959 Ensure Top Level permissions in workflows are not set to writ…
diff --git a/.github/workflows/metadata.yaml b/.github/workflows/metadata.yaml
@@ -1,5 +1,7 @@
 name: Metadata Workflow
 
+permissions:
+  contents: read
 on:
   workflow_call:
     inputs:
diff --git a/.github/workflows/quality-checks.yaml b/.github/workflows/quality-checks.yaml
@@ -1,5 +1,7 @@
 name: Code Quality Checks Workflow
 
+permissions:
+  contents: read
 on:
   workflow_call:
     inputs:
diff --git a/.github/workflows/stage-1-commit.yaml b/.github/workflows/stage-1-commit.yaml
@@ -1,5 +1,7 @@
 name: "Commit stage"
 
+permissions:
+  contents: read
 on:
   workflow_call:
     inputs:
diff --git a/.github/workflows/stage-2-test.yaml b/.github/workflows/stage-2-test.yaml
@@ -1,5 +1,7 @@
 name: "Test stage"
 
+permissions:
+  contents: read
 on:
   workflow_call:
     inputs:
diff --git a/.github/workflows/stage-4-acceptance.yaml b/.github/workflows/stage-4-acceptance.yaml
@@ -1,5 +1,7 @@
 name: "Acceptance stage"
 
+permissions:
+  contents: read
 on:
   workflow_call:
     inputs:
