mirror of
https://github.com/gradle/actions.git
synced 2025-11-26 17:09:10 +08:00
Limit token permissions in GitHub workflows (#440)
See
ea7e27ed41/docs/checks.md (token-permissions)
This commit is contained in:
3
.github/workflows/ci-ossf-scorecard.yml
vendored
3
.github/workflows/ci-ossf-scorecard.yml
vendored
@@ -6,7 +6,8 @@ on:
|
||||
branches:
|
||||
- main
|
||||
|
||||
permissions: read-all
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
analysis:
|
||||
|
||||
Reference in New Issue
Block a user