GitHub Workflows security hardening (#11789)

2022-09-20 11:28:07 +02:00 · 2022-09-20 11:28:07 +02:00 · 90bc32a70f
parent 685f53b5b4
commit 90bc32a70f
2 changed files with 6 additions and 0 deletions
--- a/.github/workflows/distribution.yml
+++ b/.github/workflows/distribution.yml
@ -13,6 +13,9 @@ on:
      - 'main'
      - 'branch_9x'

+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
  test:
    name: Run distribution tests
--- a/.github/workflows/gradle-precommit.yml
+++ b/.github/workflows/gradle-precommit.yml
@ -10,6 +10,9 @@ on:
    - main
    - branch_9x

+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
  # This runs all validation checks without tests.
  checks: