ci: scope build workflow token to least privilege #14

	name: Docs checks

	on:
	pull_request:
	paths:
	- '**.md'
	- '.github/workflows/docs-checks.yml'
	push:
	branches: [main]
	paths:
	- '**.md'
	- '.github/workflows/docs-checks.yml'

	permissions:
	contents: read

	jobs:
	docs:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0

	- name: Set up Python
	uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
	with:
	python-version: '3.12'

	- name: Install dependencies
	run: pip install pyyaml

	- name: Run docs checks
	run: python .github/scripts/docs-checks.py

Navigation Menu