From ed7ea25ec3d24cb079c0cbe662cb51645faba7bc Mon Sep 17 00:00:00 2001 From: Youri Westerman Date: Wed, 21 May 2025 15:06:05 +0200 Subject: [PATCH 1/2] Explicitly define github workflow permissions (python) --- .../src/main/resources/python/github-workflow.mustache | 3 +++ 1 file changed, 3 insertions(+) diff --git a/modules/openapi-generator/src/main/resources/python/github-workflow.mustache b/modules/openapi-generator/src/main/resources/python/github-workflow.mustache index 78cc772b1728..5ca2c1d0099e 100644 --- a/modules/openapi-generator/src/main/resources/python/github-workflow.mustache +++ b/modules/openapi-generator/src/main/resources/python/github-workflow.mustache @@ -8,6 +8,9 @@ name: {{packageName}} Python package on: [push, pull_request] +permissions: + contents: read + jobs: build: From e7b2109e79c59b91410defe41445388ba6276d19 Mon Sep 17 00:00:00 2001 From: Youri Westerman Date: Wed, 21 May 2025 15:13:43 +0200 Subject: [PATCH 2/2] Update samples --- .../.github/workflows/python.yml | 3 +++ samples/client/echo_api/python/.github/workflows/python.yml | 3 +++ .../petstore/python-aiohttp/.github/workflows/python.yml | 3 +++ .../client/petstore/python/.github/workflows/python.yml | 3 +++ 4 files changed, 12 insertions(+) diff --git a/samples/client/echo_api/python-disallowAdditionalPropertiesIfNotPresent/.github/workflows/python.yml b/samples/client/echo_api/python-disallowAdditionalPropertiesIfNotPresent/.github/workflows/python.yml index 90ad394f3d43..02a097ebbbf5 100644 --- a/samples/client/echo_api/python-disallowAdditionalPropertiesIfNotPresent/.github/workflows/python.yml +++ b/samples/client/echo_api/python-disallowAdditionalPropertiesIfNotPresent/.github/workflows/python.yml @@ -7,6 +7,9 @@ name: openapi_client Python package on: [push, pull_request] +permissions: + contents: read + jobs: build: diff --git a/samples/client/echo_api/python/.github/workflows/python.yml b/samples/client/echo_api/python/.github/workflows/python.yml index 90ad394f3d43..02a097ebbbf5 100644 --- a/samples/client/echo_api/python/.github/workflows/python.yml +++ b/samples/client/echo_api/python/.github/workflows/python.yml @@ -7,6 +7,9 @@ name: openapi_client Python package on: [push, pull_request] +permissions: + contents: read + jobs: build: diff --git a/samples/openapi3/client/petstore/python-aiohttp/.github/workflows/python.yml b/samples/openapi3/client/petstore/python-aiohttp/.github/workflows/python.yml index 84f17fbb35e7..06d03df77f1e 100644 --- a/samples/openapi3/client/petstore/python-aiohttp/.github/workflows/python.yml +++ b/samples/openapi3/client/petstore/python-aiohttp/.github/workflows/python.yml @@ -7,6 +7,9 @@ name: petstore_api Python package on: [push, pull_request] +permissions: + contents: read + jobs: build: diff --git a/samples/openapi3/client/petstore/python/.github/workflows/python.yml b/samples/openapi3/client/petstore/python/.github/workflows/python.yml index 84f17fbb35e7..06d03df77f1e 100644 --- a/samples/openapi3/client/petstore/python/.github/workflows/python.yml +++ b/samples/openapi3/client/petstore/python/.github/workflows/python.yml @@ -7,6 +7,9 @@ name: petstore_api Python package on: [push, pull_request] +permissions: + contents: read + jobs: build: