actions/gradle
1
0
Fork 0
mirror of https://github.com/gradle/actions.git synced 2025-11-26 17:09:10 +08:00
Code Issues Packages Projects Releases Wiki Activity

Limit token permissions in GitHub workflows (#440)

Browse Source 
See
ea7e27ed41/docs/checks.md (token-permissions)
This commit is contained in:
Daz DeBoer
2024-11-13 19:01:45 -07:00
committed by GitHub
parent af45dcfe3c
commit 07e0f1c008
29 changed files with 129 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
.github/workflows/demo-pr-build-scan-comment.yml vendored
View File

@@ -4,7 +4,7 @@ on:
types: [assigned, review_requested]
permissions:
pull-requests: write
contents: read
jobs:
build-distribution:
@@ -16,6 +16,8 @@ jobs:
uses: ./.github/actions/build-dist
successful-build-with-always-comment:
permissions:
pull-requests: write
needs: build-distribution
runs-on: ubuntu-latest
steps:
@@ -34,6 +36,8 @@ jobs:
run: ./gradlew build --scan
successful-build-with-comment-on-failure:
permissions:
pull-requests: write
needs: build-distribution
runs-on: ubuntu-latest
steps:
@@ -52,6 +56,8 @@ jobs:
run: ./gradlew build --scan
failing-build-with-comment-on-failure:
permissions:
pull-requests: write
needs: build-distribution
runs-on: ubuntu-latest
steps: