Merge pull request #2142 from stripe/mbroshi/merge-java-private-preview

Merge to private-preview

Author: mbroshi-stripe

.github/workflows/ci.yml

@@ -19,12 +19,17 @@ on:
       - sdk-release/**
       - feature/**
 
+permissions: {}
+
 jobs:
   build:
     name: Build
 
     runs-on: "ubuntu-24.04"
 
+    permissions:
+      contents: read
+
     steps:
       - uses: extractions/setup-just@v2
       - uses: actions/checkout@master
@@ -50,6 +55,9 @@ jobs:
 
     runs-on: "ubuntu-24.04"
 
+    permissions:
+      contents: read
+
     strategy:
       fail-fast: false
       matrix:
@@ -110,6 +118,8 @@ jobs:
       endsWith(github.actor, '-stripe')
     needs: [build, test]
     runs-on: "ubuntu-24.04"
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@master
       - name: Setup Java
@@ -173,6 +183,9 @@ jobs:
   compat:
     runs-on: "ubuntu-24.04"
 
+    permissions:
+      contents: read
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@v2

.github/workflows/rules.yml

@@ -7,6 +7,8 @@ on:
     types:
       - auto_merge_enabled
 
+permissions: {}
+
 jobs:
   require_merge_commit_on_merge_script_pr:
     name: Merge script PRs must create merge commits