Skip to content

Commit 8d08fa4

Browse files
committed
Set GitHub workflow permissions explicitly
to limit the permissions of the GITHUB_TOKEN
1 parent 30658b4 commit 8d08fa4

File tree

1 file changed

+14
-11
lines changed

1 file changed

+14
-11
lines changed

.github/workflows/gradle-build.yml

Lines changed: 14 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,22 @@
11
name: Build
2+
permissions:
3+
contents: read
4+
pull-requests: write
25

36
on: [ push ]
47

58
jobs:
69
build:
710
runs-on: ubuntu-latest
811
steps:
9-
- name: Checkout sources
10-
uses: actions/checkout@v5
11-
- name: Setup Java
12-
uses: actions/setup-java@v5
13-
with:
14-
distribution: 'temurin'
15-
java-version: 21
16-
- name: Setup Gradle
17-
uses: gradle/actions/setup-gradle@v4
18-
- name: Build with Gradle
19-
run: ./gradlew build koverLog
12+
- name: Checkout sources
13+
uses: actions/checkout@v5
14+
- name: Setup Java
15+
uses: actions/setup-java@v5
16+
with:
17+
distribution: 'temurin'
18+
java-version: 21
19+
- name: Setup Gradle
20+
uses: gradle/actions/setup-gradle@v4
21+
- name: Build with Gradle
22+
run: ./gradlew build koverLog

0 commit comments

Comments
 (0)