Limit token permissions in GitHub workflows (#440)

See https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#token-permissions
2026-10-16 19:57:12 +08:00 · 2024-11-13 19:01:45 -07:00
1 parent af45dcfe3c
commit 07e0f1c008
@@ -3,6 +3,9 @@ name: Demo Job Summary, for Gradle builds
 on:
  workflow_dispatch:

+permissions:
+  contents: read
+
 jobs:
  build-distribution:
    runs-on: ubuntu-latest