try to set pull_request_target permissions to read only

Signed-off-by: Theodor Mihalache <[email protected]>
tmihalac · Sep 23, 2024 · be6572d · be6572d
1 parent e732355
commit be6572d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/java_pr.yml b/.github/workflows/java_pr.yml
@@ -9,7 +9,7 @@ on:
 
 jobs:
   lint-java:
-    permissions: {}
+    permissions: read-all
 
     # when using pull_request_target, all jobs MUST have this if check for 'ok-to-test' or 'approved' for security purposes.
     if:

diff --git a/.github/workflows/pr_integration_tests.yml b/.github/workflows/pr_integration_tests.yml
@@ -14,7 +14,7 @@ on:
 
 jobs:
   integration-test-python:
-    permissions: {}
+    permissions: read-all
 
     # when using pull_request_target, all jobs MUST have this if check for 'ok-to-test' or 'approved' for security purposes.
     if: