mirror of
https://github.com/gradle/actions.git
synced 2025-11-26 17:09:10 +08:00
Limit token permissions in GitHub workflows (#440)
See
ea7e27ed41/docs/checks.md (token-permissions)
This commit is contained in:
6
.github/workflows/update-checksums-file.yml
vendored
6
.github/workflows/update-checksums-file.yml
vendored
@@ -7,11 +7,13 @@ on:
|
||||
workflow_dispatch:
|
||||
|
||||
permissions:
|
||||
contents: write
|
||||
pull-requests: write
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
update-checksums:
|
||||
permissions:
|
||||
contents: write
|
||||
pull-requests: write
|
||||
name: Update checksums
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
|
||||
Reference in New Issue
Block a user