GitHub Workflows security hardening (#11789)

2022-09-20 11:28:07 +02:00 · 2022-09-20 11:28:07 +02:00 · 26d6063ec3
parent ecb0ba542b
commit 26d6063ec3
2 changed files with 6 additions and 0 deletions
--- a/.github/workflows/distribution.yml
+++ b/.github/workflows/distribution.yml
@ -12,6 +12,9 @@ on:
    branches:
      - 'main'

+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
  test:
    name: Run distribution tests
--- a/.github/workflows/gradle-precommit.yml
+++ b/.github/workflows/gradle-precommit.yml
@ -10,6 +10,9 @@ on:
    - main
    - branch_9x

+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
  # This runs all validation checks without tests.
  checks: