Merge pull request #184 from blacklanternsecurity/test-explicit-permissions

explicit permissions workflow

Author: liquidsec

.github/workflows/tests.yaml

@@ -13,6 +13,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: write  # Required for tagging releases and publishing packages
+  pull-requests: read  # Required to read PR metadata
+
 jobs:
   lint:
     runs-on: ubuntu-latest

pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "badsecrets"
-version = "0.9.29"
+version = "0.9.30"
 description = "About"
 authors = ["A library for detecting known or weak secrets on across many platforms"]
 license = "GPL-3.0"