ci: add GitHub token permissions for workflow

Signed-off-by: Varun Sharma <varunsh@stepsecurity.io>
qos-ch · Jul 10, 2022 · 14ec670 · 14ec670
1 parent c0001d4
commit 14ec670
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -17,6 +17,9 @@ concurrency:
   group: ${{ (github.ref == 'refs/heads/branch_1.2.18' || github.ref == 'refs/heads/main' || github.ref == 'refs/heads/release' ) && format('ci-main-{0}', github.sha) || format('ci-main-{0}', github.ref) }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   Test:
     name: JDK ${{ matrix.jdk }}, ${{ matrix.os }}