Merge pull request #431 from cucumber/reduce-actions-permissions

Reduce GitHub Action permissions

Author: mpkorstanje

.github/workflows/build.yml

@@ -1,5 +1,7 @@
 name: Cucumber Scala CI
 
+permissions: {}
+
 on:
   pull_request:
     branches:
@@ -24,6 +26,8 @@ jobs:
     steps:
 
     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      with:
+        persist-credentials: false
 
     - name: Cache sbt
       uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3

.github/workflows/release-github.yaml

@@ -1,5 +1,7 @@
 name: Release GitHub
 
+permissions: {}
+
 on:
   push:
     branches: [release/*]

.github/workflows/release-sbt.yml

@@ -1,5 +1,7 @@
 name: Release scala package
 
+permissions: {}
+
 on:
   push:
     branches:

.github/workflows/version-policy-check.yml

@@ -1,5 +1,7 @@
 name: Version policy check
 
+permissions: {}
+
 on:
   pull_request:
     branches:
@@ -18,6 +20,8 @@ jobs:
     steps:
 
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
 
       - name: Cache sbt
         uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3