Skip to content

Commit e5642b0

Browse files
committed
feedback: move up permissions where possible
1 parent 19f258c commit e5642b0

File tree

1 file changed

+4
-14
lines changed

1 file changed

+4
-14
lines changed

.github/workflows/gradle.yml

Lines changed: 4 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -6,13 +6,13 @@ on:
66
pull_request:
77
branches:
88
- '[7-9]+.[0-9]+.x'
9+
permissions:
10+
contents: read
11+
packages: read
912
jobs:
1013
datastore-build:
1114
name: "Build Datastore Project"
1215
runs-on: ubuntu-24.04
13-
permissions:
14-
contents: read
15-
packages: read
1616
strategy:
1717
fail-fast: false
1818
matrix:
@@ -37,9 +37,6 @@ jobs:
3737
mongodb-build:
3838
name: "Build Mongodb Project"
3939
runs-on: ubuntu-24.04
40-
permissions:
41-
contents: read
42-
packages: read
4340
strategy:
4441
fail-fast: false
4542
matrix:
@@ -69,9 +66,6 @@ jobs:
6966
hibernate5-build:
7067
name: "Build Hibernate5 Project"
7168
runs-on: ubuntu-24.04
72-
permissions:
73-
contents: read
74-
packages: read
7569
strategy:
7670
fail-fast: false
7771
matrix:
@@ -98,9 +92,6 @@ jobs:
9892
name: "Publish Snapshot"
9993
needs: [datastore-build, hibernate5-build, mongodb-build]
10094
runs-on: ubuntu-24.04
101-
permissions:
102-
contents: read
103-
packages: read
10495
steps:
10596
- name: "📥 Checkout the repository"
10697
uses: actions/checkout@v4
@@ -127,8 +118,7 @@ jobs:
127118
needs: publish
128119
runs-on: ubuntu-24.04
129120
permissions:
130-
contents: write
131-
packages: read
121+
contents: write # so gh-pages can be updated
132122
steps:
133123
- name: "📥 Checkout the repository"
134124
uses: actions/checkout@v4

0 commit comments

Comments
 (0)