Restrict Actions permissions to read.

real-logic · May 31, 2022 · c5f9ead · c5f9ead
1 parent 8155d68
commit c5f9ead
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -18,6 +18,9 @@ concurrency:
 env:
   GRADLE_OPTS: '-Dorg.gradle.daemon=false -Dorg.gradle.java.installations.auto-detect=false -Dorg.gradle.warning.mode=fail'
 
+permissions:
+  contents: read
+
 jobs:
   build:
     name: Java ${{ matrix.java }} (${{ matrix.os }})