Limit token permissions in GitHub workflows (#440)

See https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#token-permissions
2026-05-07 02:22:05 +08:00 · 2024-11-13 19:01:45 -07:00
parent af45dcfe3c
commit 07e0f1c008
29 changed files with 129 additions and 17 deletions
@@ -17,6 +17,9 @@ env:
  SKIP_DIST: ${{ inputs.skip-dist }}
  GRADLE_BUILD_ACTION_CACHE_KEY_PREFIX: detect-java-toolchain-${{ inputs.cache-key-prefix }}

+permissions:
+  contents: read
+
 jobs:
  # Test that pre-installed runner JDKs are detected
  detect-toolchains-pre-installed-jdks: