mirror of https://github.com/grpc/grpc-java.git
Limit permissions to gradlew validator GH Action
I've already limited the grpc-wide setting to read-only access, but limiting it explicitly here seems like a good idea; all workflows should explicitly set their permissions since any action can implicitly access the GITHUB_TOKEN.
This commit is contained in:
parent
505594ac53
commit
a7792d3d14
|
@ -1,6 +1,9 @@
|
|||
name: "Validate Gradle Wrapper"
|
||||
on: [push, pull_request]
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
validation:
|
||||
name: "Gradle wrapper validation"
|
||||
|
|
Loading…
Reference in New Issue