actions/gradle
1
0 Fork 0
mirror of https://github.com/gradle/actions.git synced 2026-10-16 19:57:12 +08:00
Code Issues Packages Projects Releases Wiki Activity

Limit token permissions in GitHub workflows (#440)

Browse Source 
See
https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#token-permissions
This commit is contained in:
Daz DeBoer authored and GitHub committed 2024-11-13 19:01:45 -07:00
1 parent af45dcfe3c
commit 07e0f1c008
29 files changed
+129 -17
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

.github/workflows/integ-test-dependency-submission-failures.yml
+3
View File
@@ -18,6 +18,9 @@ env:
GRADLE_BUILD_ACTION_CACHE_KEY_PREFIX: dependency-submission-failures-${{ inputs.cache-key-prefix }}
GITHUB_DEPENDENCY_GRAPH_REF: 'refs/tags/v0.0.1' # Use a different ref to avoid updating the real dependency graph for the repository
permissions:
contents: read
jobs:
dependency-submission-failures-failing-build:
runs-on: ubuntu-latest