[#1553] SECURITY: Fix code scanning alert - Token-Permissions

Closes #1553
remkop · Jan 31, 2022 · 0e36711 · 0e36711
1 parent e6e3a50
commit 0e36711
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -1,5 +1,6 @@
 name: Build
 on: [ push, pull_request ]
+permissions: read-all
 
 jobs:
   build-java-8-plus:

diff --git a/RELEASE-NOTES.md b/RELEASE-NOTES.md
@@ -49,6 +49,7 @@ Picocli follows [semantic versioning](http://semver.org/).
 * [#1462] DOC, BUILD, DEP: Extend documentation on argument files, fix broken/outdated links, update dependencies. Thanks to [Andreas Deininger](https://github.com/deining) for the pull request.
 * [#1457] DOC: add caution about arguments in @files with quoted option parameters. Thanks to [Andreas Deininger](https://github.com/deining) for the pull request.
 * [#1544][#1545] DOC: Add NOTICE file with GPL v2 + CPE license. Thanks to [Keith M Swartz](https://github.com/kswartz26) for the pull request.
+* [#1553] SECURITY: Fix code scanning alert - Token-Permissions
 * [#1491] BUILD: Add build job in CI; Thanks to [Goooler](https://github.com/Goooler) for the pull request.
 * [#1482] BUILD: Optimize gradle; Thanks to [Goooler](https://github.com/Goooler) for the pull request.
 * [#1461] BUILD: Allow publishing without signing for non-release versions. Thanks to [Andreas Deininger](https://github.com/deining) for raising this.