Merge pull request #3807 from amvanbaren/workflow-permissions

Test sonar workflow with permissions

Author: amvanbaren

.github/workflows/main.yml

@@ -8,6 +8,8 @@ on:
 jobs:
   pr:
     name: Save PR Info
+    permissions:
+      contents: none
     runs-on: ubuntu-latest
     steps:
       - name: Save PR number to file

.github/workflows/smoketest.yml

@@ -5,6 +5,8 @@ on:
       - production
 jobs:
   test:
+    permissions:
+      contents: none
     timeout-minutes: 60
     runs-on: ubuntu-latest
     steps:

.github/workflows/sonar.yml

@@ -6,6 +6,8 @@ on:
 jobs:
   sonar:
     name: Sonar
+    permissions:
+      pull-requests: read
     runs-on: ubuntu-latest
     if: github.event.workflow_run.conclusion == 'success'
     steps: