Skip to content

Commit bfe4aba

Browse files
authored
Add minimum GitHub token permissions for workflows (#7541)
* Update gradle_release.yml to contents write * Update gradle_snapshot.yml to contents write
1 parent ed674be commit bfe4aba

File tree

2 files changed

+10
-0
lines changed

2 files changed

+10
-0
lines changed

.github/workflows/gradle_release.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,10 +10,15 @@ on:
1010
tags:
1111
- 'v3.*.*'
1212

13+
permissions:
14+
contents: read
15+
1316
jobs:
1417
build:
1518

1619
runs-on: ubuntu-latest
20+
permissions:
21+
contents: write
1722
env:
1823
CI_BUILD_NUMBER: ${{ github.run_number }}
1924
steps:

.github/workflows/gradle_snapshot.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,12 +6,17 @@ name: Snapshot
66
on:
77
push:
88
branches: [ '3.x' ]
9+
10+
permissions:
11+
contents: read
912

1013
jobs:
1114
build:
1215

1316
runs-on: ubuntu-latest
1417
if: github.repository == 'ReactiveX/RxJava'
18+
permissions:
19+
contents: write
1520
env:
1621
# ------------------------------------------------------------------------------
1722
CI_BUILD_NUMBER: ${{ github.run_number }}

0 commit comments

Comments
 (0)