OpenSSF best practices: set GitHub token permission to read-only (Eri…

…csson#615) Signed-off-by: Georg Kunz <[email protected]>
masokol · Nov 20, 2023 · c3c8467 · c3c8467
1 parent 83dcf1e
commit c3c8467
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/actions.yml b/.github/workflows/actions.yml
@@ -14,6 +14,8 @@ on:
 env:
   MAVEN_OPTS: -Dmaven.wagon.http.retryHandler.class=standard -Dmaven.wagon.http.retryHandler.count=3 -Dhttp.keepAlive=false -Dmaven.wagon.http.pool=false -Dmaven.wagon.httpconnectionManager.ttlSeconds=120
 
+permissions: read-all
+
 jobs:
   tests:
     runs-on: ubuntu-20.04