This is an automated email from the ASF dual-hosted git repository.
damccorm pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/beam.git
The following commit(s) were added to refs/heads/master by this push:
new e8c94d72a35 Remove outdated pull_request_target permission comments
from workflows (#40371)
e8c94d72a35 is described below
commit e8c94d72a35e8303324174acf9d147bf270a18e9
Author: Danny McCormick <[email protected]>
AuthorDate: Thu Oct 1 16:14:43 2026 +0000
Remove outdated pull_request_target permission comments from workflows
(#40371)
---
.github/workflows/beam_CancelStaleDataflowJobs.yml | 2 +-
.github/workflows/beam_CleanUpDataprocResources.yml | 2 +-
.github/workflows/beam_CleanUpGCPResources.yml | 2 +-
.github/workflows/beam_CleanUpPrebuiltSDKImages.yml | 2 +-
.github/workflows/beam_IODatastoresCredentialsRotation.yml | 2 +-
.github/workflows/beam_Inference_Python_Benchmarks_Dataflow.yml | 2 +-
.github/workflows/beam_Infrastructure_PolicyEnforcer.yml | 2 +-
.github/workflows/beam_Infrastructure_SecurityLogging.yml | 2 +-
.github/workflows/beam_Infrastructure_ServiceAccountKeys.yml | 2 +-
.github/workflows/beam_Java_LoadTests_Combine_Smoke.yml | 2 +-
.github/workflows/beam_LoadTests_Go_CoGBK_Dataflow_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Go_CoGBK_Flink_batch.yml | 2 +-
.github/workflows/beam_LoadTests_Go_Combine_Dataflow_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Go_Combine_Flink_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Go_GBK_Dataflow_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Go_GBK_Flink_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Go_ParDo_Dataflow_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Go_ParDo_Flink_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Go_SideInput_Dataflow_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Go_SideInput_Flink_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_Streaming.yml | 2 +-
.../beam_LoadTests_Java_CoGBK_Dataflow_V2_Batch_JavaVersions.yml | 2 +-
.../beam_LoadTests_Java_CoGBK_Dataflow_V2_Streaming_JavaVersions.yml | 2 +-
.../beam_LoadTests_Java_CoGBK_SparkStructuredStreaming_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Java_Combine_Dataflow_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Java_Combine_Dataflow_Streaming.yml | 2 +-
.../beam_LoadTests_Java_Combine_SparkStructuredStreaming_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Java_GBK_Dataflow_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Java_GBK_Dataflow_Streaming.yml | 2 +-
.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Batch_Java17.yml | 2 +-
.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Streaming.yml | 2 +-
.../workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Streaming_Java17.yml | 2 +-
.github/workflows/beam_LoadTests_Java_GBK_Smoke.yml | 2 +-
.../beam_LoadTests_Java_GBK_SparkStructuredStreaming_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_Streaming.yml | 2 +-
.../beam_LoadTests_Java_ParDo_Dataflow_V2_Batch_JavaVersions.yml | 2 +-
.../beam_LoadTests_Java_ParDo_Dataflow_V2_Streaming_JavaVersions.yml | 2 +-
.../beam_LoadTests_Java_ParDo_SparkStructuredStreaming_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Java_PubsubIO.yml | 2 +-
.github/workflows/beam_LoadTests_Python_CoGBK_Dataflow_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Python_CoGBK_Dataflow_Streaming.yml | 2 +-
.github/workflows/beam_LoadTests_Python_CoGBK_Flink_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Python_Combine_Dataflow_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Python_Combine_Dataflow_Streaming.yml | 2 +-
.github/workflows/beam_LoadTests_Python_Combine_Flink_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Python_Combine_Flink_Streaming.yml | 2 +-
.github/workflows/beam_LoadTests_Python_FnApiRunner_Microbenchmark.yml | 2 +-
.github/workflows/beam_LoadTests_Python_GBK_Dataflow_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Python_GBK_Dataflow_Streaming.yml | 2 +-
.github/workflows/beam_LoadTests_Python_GBK_Flink_Batch.yml | 2 +-
.../workflows/beam_LoadTests_Python_GBK_reiterate_Dataflow_Batch.yml | 2 +-
.../beam_LoadTests_Python_GBK_reiterate_Dataflow_Streaming.yml | 2 +-
.github/workflows/beam_LoadTests_Python_ParDo_Dataflow_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Python_ParDo_Dataflow_Streaming.yml | 2 +-
.github/workflows/beam_LoadTests_Python_ParDo_Flink_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Python_ParDo_Flink_Streaming.yml | 2 +-
.github/workflows/beam_LoadTests_Python_SideInput_Dataflow_Batch.yml | 2 +-
.github/workflows/beam_LoadTests_Python_Smoke.yml | 2 +-
.github/workflows/beam_MetricsCredentialsRotation.yml | 2 +-
.github/workflows/beam_Metrics_Report.yml | 2 +-
.github/workflows/beam_PerformanceTests_AvroIOIT.yml | 2 +-
.github/workflows/beam_PerformanceTests_AvroIOIT_HDFS.yml | 2 +-
.github/workflows/beam_PerformanceTests_BigQueryIO_Batch_Java_Avro.yml | 2 +-
.github/workflows/beam_PerformanceTests_BigQueryIO_Batch_Java_Json.yml | 2 +-
.github/workflows/beam_PerformanceTests_BigQueryIO_Streaming_Java.yml | 2 +-
.github/workflows/beam_PerformanceTests_BiqQueryIO_Read_Python.yml | 2 +-
.../workflows/beam_PerformanceTests_BiqQueryIO_Write_Python_Batch.yml | 2 +-
.github/workflows/beam_PerformanceTests_Cdap.yml | 2 +-
.github/workflows/beam_PerformanceTests_Compressed_TextIOIT.yml | 2 +-
.github/workflows/beam_PerformanceTests_Compressed_TextIOIT_HDFS.yml | 2 +-
.github/workflows/beam_PerformanceTests_HadoopFormat.yml | 2 +-
.github/workflows/beam_PerformanceTests_JDBC.yml | 2 +-
.github/workflows/beam_PerformanceTests_Kafka_IO.yml | 2 +-
.github/workflows/beam_PerformanceTests_ManyFiles_TextIOIT.yml | 2 +-
.github/workflows/beam_PerformanceTests_ManyFiles_TextIOIT_HDFS.yml | 2 +-
.github/workflows/beam_PerformanceTests_MongoDBIO_IT.yml | 2 +-
.github/workflows/beam_PerformanceTests_ParquetIOIT.yml | 2 +-
.github/workflows/beam_PerformanceTests_ParquetIOIT_HDFS.yml | 2 +-
.github/workflows/beam_PerformanceTests_PubsubIOIT_Python_Streaming.yml | 2 +-
.github/workflows/beam_PerformanceTests_SQLBigQueryIO_Batch_Java.yml | 2 +-
.github/workflows/beam_PerformanceTests_SingleStoreIO.yml | 2 +-
.github/workflows/beam_PerformanceTests_SpannerIO_Read_2GB_Python.yml | 2 +-
.../beam_PerformanceTests_SpannerIO_Write_2GB_Python_Batch.yml | 2 +-
.github/workflows/beam_PerformanceTests_SparkReceiver_IO.yml | 2 +-
.github/workflows/beam_PerformanceTests_TFRecordIOIT.yml | 2 +-
.github/workflows/beam_PerformanceTests_TFRecordIOIT_HDFS.yml | 2 +-
.github/workflows/beam_PerformanceTests_TextIOIT.yml | 2 +-
.github/workflows/beam_PerformanceTests_TextIOIT_HDFS.yml | 2 +-
.github/workflows/beam_PerformanceTests_TextIOIT_Python.yml | 2 +-
.github/workflows/beam_PerformanceTests_WordCountIT_PythonVersions.yml | 2 +-
.github/workflows/beam_PerformanceTests_XmlIOIT.yml | 2 +-
.github/workflows/beam_PerformanceTests_XmlIOIT_HDFS.yml | 2 +-
.github/workflows/beam_PerformanceTests_xlang_KafkaIO_Python.yml | 2 +-
.github/workflows/beam_PostRelease_NightlySnapshot.yml | 2 +-
.github/workflows/beam_Prober_CommunityMetrics.yml | 2 +-
.github/workflows/beam_Publish_BeamMetrics.yml | 2 +-
.github/workflows/beam_Publish_Beam_SDK_Snapshots.yml | 2 +-
.github/workflows/beam_Publish_Docker_Snapshots.yml | 2 +-
.github/workflows/beam_Publish_Website.yml | 2 +-
.github/workflows/beam_Python_CostBenchmarks_Dataflow.yml | 2 +-
.github/workflows/beam_Python_ValidatesContainer_Dataflow_ARM.yml | 2 +-
.github/workflows/beam_Release_NightlySnapshot.yml | 2 +-
.github/workflows/beam_Release_Python_NightlySnapshot.yml | 2 +-
.github/workflows/beam_StressTests_Java_BigQueryIO.yml | 2 +-
.github/workflows/beam_StressTests_Java_BigTableIO.yml | 2 +-
.github/workflows/beam_StressTests_Java_KafkaIO.yml | 2 +-
.github/workflows/beam_StressTests_Java_PubSubIO.yml | 2 +-
.github/workflows/beam_StressTests_Java_SpannerIO.yml | 2 +-
111 files changed, 111 insertions(+), 111 deletions(-)
diff --git a/.github/workflows/beam_CancelStaleDataflowJobs.yml
b/.github/workflows/beam_CancelStaleDataflowJobs.yml
index 24a8219b1d5..e7786776ce0 100644
--- a/.github/workflows/beam_CancelStaleDataflowJobs.yml
+++ b/.github/workflows/beam_CancelStaleDataflowJobs.yml
@@ -32,7 +32,7 @@ env:
GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GE_CACHE_USERNAME }}
GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GE_CACHE_PASSWORD }}
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_CleanUpDataprocResources.yml
b/.github/workflows/beam_CleanUpDataprocResources.yml
index c7004b1251c..3a7f8b9b9c1 100644
--- a/.github/workflows/beam_CleanUpDataprocResources.yml
+++ b/.github/workflows/beam_CleanUpDataprocResources.yml
@@ -20,7 +20,7 @@ on:
- cron: '0 0 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_CleanUpGCPResources.yml
b/.github/workflows/beam_CleanUpGCPResources.yml
index fccdc666a39..3993899f870 100644
--- a/.github/workflows/beam_CleanUpGCPResources.yml
+++ b/.github/workflows/beam_CleanUpGCPResources.yml
@@ -32,7 +32,7 @@ env:
GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GE_CACHE_USERNAME }}
GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GE_CACHE_PASSWORD }}
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_CleanUpPrebuiltSDKImages.yml
b/.github/workflows/beam_CleanUpPrebuiltSDKImages.yml
index 09f1941de83..f7a742d1a82 100644
--- a/.github/workflows/beam_CleanUpPrebuiltSDKImages.yml
+++ b/.github/workflows/beam_CleanUpPrebuiltSDKImages.yml
@@ -32,7 +32,7 @@ env:
GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GE_CACHE_USERNAME }}
GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GE_CACHE_PASSWORD }}
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_IODatastoresCredentialsRotation.yml
b/.github/workflows/beam_IODatastoresCredentialsRotation.yml
index 68bf18fd371..77df1b04b8b 100644
--- a/.github/workflows/beam_IODatastoresCredentialsRotation.yml
+++ b/.github/workflows/beam_IODatastoresCredentialsRotation.yml
@@ -20,7 +20,7 @@ on:
- cron: '0 2 1 * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_Inference_Python_Benchmarks_Dataflow.yml
b/.github/workflows/beam_Inference_Python_Benchmarks_Dataflow.yml
index fb7fecd2c01..f880c7e31f9 100644
--- a/.github/workflows/beam_Inference_Python_Benchmarks_Dataflow.yml
+++ b/.github/workflows/beam_Inference_Python_Benchmarks_Dataflow.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 3 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_Infrastructure_PolicyEnforcer.yml
b/.github/workflows/beam_Infrastructure_PolicyEnforcer.yml
index 730d45cf992..750eabfbc8c 100644
--- a/.github/workflows/beam_Infrastructure_PolicyEnforcer.yml
+++ b/.github/workflows/beam_Infrastructure_PolicyEnforcer.yml
@@ -31,7 +31,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.issue.number || github.sha
|| github.head_ref || github.ref }}-${{ github.event.schedule ||
github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
contents: read
issues: write
diff --git a/.github/workflows/beam_Infrastructure_SecurityLogging.yml
b/.github/workflows/beam_Infrastructure_SecurityLogging.yml
index fa5bcb34766..c7bb7e992bc 100644
--- a/.github/workflows/beam_Infrastructure_SecurityLogging.yml
+++ b/.github/workflows/beam_Infrastructure_SecurityLogging.yml
@@ -34,7 +34,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.sha || github.head_ref ||
github.ref }}-${{ github.event.schedule || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
contents: read
diff --git a/.github/workflows/beam_Infrastructure_ServiceAccountKeys.yml
b/.github/workflows/beam_Infrastructure_ServiceAccountKeys.yml
index 2520e6bf77b..afe982ca5d4 100644
--- a/.github/workflows/beam_Infrastructure_ServiceAccountKeys.yml
+++ b/.github/workflows/beam_Infrastructure_ServiceAccountKeys.yml
@@ -38,7 +38,7 @@ concurrency:
group: ${{ github.workflow }}
cancel-in-progress: false
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
contents: read
diff --git a/.github/workflows/beam_Java_LoadTests_Combine_Smoke.yml
b/.github/workflows/beam_Java_LoadTests_Combine_Smoke.yml
index c6226496683..33f452e83ba 100644
--- a/.github/workflows/beam_Java_LoadTests_Combine_Smoke.yml
+++ b/.github/workflows/beam_Java_LoadTests_Combine_Smoke.yml
@@ -20,7 +20,7 @@ on:
# - cron: '10 12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Go_CoGBK_Dataflow_Batch.yml
b/.github/workflows/beam_LoadTests_Go_CoGBK_Dataflow_Batch.yml
index c55cee5267c..37c2d2ed35c 100644
--- a/.github/workflows/beam_LoadTests_Go_CoGBK_Dataflow_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Go_CoGBK_Dataflow_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Go_CoGBK_Flink_batch.yml
b/.github/workflows/beam_LoadTests_Go_CoGBK_Flink_batch.yml
index f59ad9900e5..03689f7a75f 100644
--- a/.github/workflows/beam_LoadTests_Go_CoGBK_Flink_batch.yml
+++ b/.github/workflows/beam_LoadTests_Go_CoGBK_Flink_batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Go_Combine_Dataflow_Batch.yml
b/.github/workflows/beam_LoadTests_Go_Combine_Dataflow_Batch.yml
index ff215c901d6..364a6f0cc0e 100644
--- a/.github/workflows/beam_LoadTests_Go_Combine_Dataflow_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Go_Combine_Dataflow_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Go_Combine_Flink_Batch.yml
b/.github/workflows/beam_LoadTests_Go_Combine_Flink_Batch.yml
index 03699c96ef5..6e01c8b508b 100644
--- a/.github/workflows/beam_LoadTests_Go_Combine_Flink_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Go_Combine_Flink_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Go_GBK_Dataflow_Batch.yml
b/.github/workflows/beam_LoadTests_Go_GBK_Dataflow_Batch.yml
index c52389e84fd..cc34746b5f5 100644
--- a/.github/workflows/beam_LoadTests_Go_GBK_Dataflow_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Go_GBK_Dataflow_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Go_GBK_Flink_Batch.yml
b/.github/workflows/beam_LoadTests_Go_GBK_Flink_Batch.yml
index 731c5b21274..c747d1d3bf0 100644
--- a/.github/workflows/beam_LoadTests_Go_GBK_Flink_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Go_GBK_Flink_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Go_ParDo_Dataflow_Batch.yml
b/.github/workflows/beam_LoadTests_Go_ParDo_Dataflow_Batch.yml
index f8643238e4e..663108fc1a2 100644
--- a/.github/workflows/beam_LoadTests_Go_ParDo_Dataflow_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Go_ParDo_Dataflow_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Go_ParDo_Flink_Batch.yml
b/.github/workflows/beam_LoadTests_Go_ParDo_Flink_Batch.yml
index fe112061c64..c9a19bf0e8b 100644
--- a/.github/workflows/beam_LoadTests_Go_ParDo_Flink_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Go_ParDo_Flink_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Go_SideInput_Dataflow_Batch.yml
b/.github/workflows/beam_LoadTests_Go_SideInput_Dataflow_Batch.yml
index 59bf9bd952b..5bb1eae43cb 100644
--- a/.github/workflows/beam_LoadTests_Go_SideInput_Dataflow_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Go_SideInput_Dataflow_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Go_SideInput_Flink_Batch.yml
b/.github/workflows/beam_LoadTests_Go_SideInput_Flink_Batch.yml
index f18604b590b..58923afe699 100644
--- a/.github/workflows/beam_LoadTests_Go_SideInput_Flink_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Go_SideInput_Flink_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 13 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_Batch.yml
b/.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_Batch.yml
index 2be67a5098a..b8027bbf761 100644
--- a/.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 13 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_Streaming.yml
b/.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_Streaming.yml
index cd4e3c44024..e05f0d91f05 100644
--- a/.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_Streaming.yml
+++ b/.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_Streaming.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 13 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git
a/.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_V2_Batch_JavaVersions.yml
b/.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_V2_Batch_JavaVersions.yml
index 5766d13483f..4e7dc4a1fe0 100644
---
a/.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_V2_Batch_JavaVersions.yml
+++
b/.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_V2_Batch_JavaVersions.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 13 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git
a/.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_V2_Streaming_JavaVersions.yml
b/.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_V2_Streaming_JavaVersions.yml
index 597d3c8c9bd..23649522bf3 100644
---
a/.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_V2_Streaming_JavaVersions.yml
+++
b/.github/workflows/beam_LoadTests_Java_CoGBK_Dataflow_V2_Streaming_JavaVersions.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 13 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git
a/.github/workflows/beam_LoadTests_Java_CoGBK_SparkStructuredStreaming_Batch.yml
b/.github/workflows/beam_LoadTests_Java_CoGBK_SparkStructuredStreaming_Batch.yml
index 026bb08d098..37efa8e80d8 100644
---
a/.github/workflows/beam_LoadTests_Java_CoGBK_SparkStructuredStreaming_Batch.yml
+++
b/.github/workflows/beam_LoadTests_Java_CoGBK_SparkStructuredStreaming_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 13 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Java_Combine_Dataflow_Batch.yml
b/.github/workflows/beam_LoadTests_Java_Combine_Dataflow_Batch.yml
index 0267d77c8af..f8d65828eca 100644
--- a/.github/workflows/beam_LoadTests_Java_Combine_Dataflow_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Java_Combine_Dataflow_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 13 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git
a/.github/workflows/beam_LoadTests_Java_Combine_Dataflow_Streaming.yml
b/.github/workflows/beam_LoadTests_Java_Combine_Dataflow_Streaming.yml
index 5107db69860..4ec2c1fedcd 100644
--- a/.github/workflows/beam_LoadTests_Java_Combine_Dataflow_Streaming.yml
+++ b/.github/workflows/beam_LoadTests_Java_Combine_Dataflow_Streaming.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 13 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git
a/.github/workflows/beam_LoadTests_Java_Combine_SparkStructuredStreaming_Batch.yml
b/.github/workflows/beam_LoadTests_Java_Combine_SparkStructuredStreaming_Batch.yml
index 0e422d9b5f9..9eb7b89940f 100644
---
a/.github/workflows/beam_LoadTests_Java_Combine_SparkStructuredStreaming_Batch.yml
+++
b/.github/workflows/beam_LoadTests_Java_Combine_SparkStructuredStreaming_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 13 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_Batch.yml
b/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_Batch.yml
index df6b4c1c8dc..4b188a15006 100644
--- a/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 13 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_Streaming.yml
b/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_Streaming.yml
index c4c99566aef..29bad1739ce 100644
--- a/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_Streaming.yml
+++ b/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_Streaming.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 14 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Batch.yml
b/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Batch.yml
index ecfd3f5752d..cbfb899ea32 100644
--- a/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 14 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git
a/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Batch_Java17.yml
b/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Batch_Java17.yml
index 3057bfbd669..cc3ce0bd2e0 100644
--- a/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Batch_Java17.yml
+++ b/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Batch_Java17.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 14 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git
a/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Streaming.yml
b/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Streaming.yml
index 090d500ee5d..df967d156b0 100644
--- a/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Streaming.yml
+++ b/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Streaming.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 14 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git
a/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Streaming_Java17.yml
b/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Streaming_Java17.yml
index 61fe5eb6d6e..b8af49f93af 100644
--- a/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Streaming_Java17.yml
+++ b/.github/workflows/beam_LoadTests_Java_GBK_Dataflow_V2_Streaming_Java17.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 14 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_LoadTests_Java_GBK_Smoke.yml
b/.github/workflows/beam_LoadTests_Java_GBK_Smoke.yml
index 6a26957ef93..962c7113a7b 100644
--- a/.github/workflows/beam_LoadTests_Java_GBK_Smoke.yml
+++ b/.github/workflows/beam_LoadTests_Java_GBK_Smoke.yml
@@ -18,7 +18,7 @@ name: LoadTests Java GBK Smoke
on:
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git
a/.github/workflows/beam_LoadTests_Java_GBK_SparkStructuredStreaming_Batch.yml
b/.github/workflows/beam_LoadTests_Java_GBK_SparkStructuredStreaming_Batch.yml
index 4f6eb9d66db..1215eaed1c9 100644
---
a/.github/workflows/beam_LoadTests_Java_GBK_SparkStructuredStreaming_Batch.yml
+++
b/.github/workflows/beam_LoadTests_Java_GBK_SparkStructuredStreaming_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 14 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_Batch.yml
b/.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_Batch.yml
index 6ba3e4b884a..3db0357dcc9 100644
--- a/.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 14 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_Streaming.yml
b/.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_Streaming.yml
index 2ef48d7aaf6..f31ad13e50d 100644
--- a/.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_Streaming.yml
+++ b/.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_Streaming.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 14 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git
a/.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_V2_Batch_JavaVersions.yml
b/.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_V2_Batch_JavaVersions.yml
index bcc43739d93..65cb7b3a12b 100644
---
a/.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_V2_Batch_JavaVersions.yml
+++
b/.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_V2_Batch_JavaVersions.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 14 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git
a/.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_V2_Streaming_JavaVersions.yml
b/.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_V2_Streaming_JavaVersions.yml
index 15ee079dcad..01b815a60d1 100644
---
a/.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_V2_Streaming_JavaVersions.yml
+++
b/.github/workflows/beam_LoadTests_Java_ParDo_Dataflow_V2_Streaming_JavaVersions.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 14 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git
a/.github/workflows/beam_LoadTests_Java_ParDo_SparkStructuredStreaming_Batch.yml
b/.github/workflows/beam_LoadTests_Java_ParDo_SparkStructuredStreaming_Batch.yml
index 95d7bbf46c9..bed7e335e5e 100644
---
a/.github/workflows/beam_LoadTests_Java_ParDo_SparkStructuredStreaming_Batch.yml
+++
b/.github/workflows/beam_LoadTests_Java_ParDo_SparkStructuredStreaming_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 15 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Java_PubsubIO.yml
b/.github/workflows/beam_LoadTests_Java_PubsubIO.yml
index 6aa9b0b4982..ea03c528493 100644
--- a/.github/workflows/beam_LoadTests_Java_PubsubIO.yml
+++ b/.github/workflows/beam_LoadTests_Java_PubsubIO.yml
@@ -20,7 +20,7 @@ on:
- cron: '30 21 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Python_CoGBK_Dataflow_Batch.yml
b/.github/workflows/beam_LoadTests_Python_CoGBK_Dataflow_Batch.yml
index d72781e0b88..c691a4841e9 100644
--- a/.github/workflows/beam_LoadTests_Python_CoGBK_Dataflow_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Python_CoGBK_Dataflow_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 15 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git
a/.github/workflows/beam_LoadTests_Python_CoGBK_Dataflow_Streaming.yml
b/.github/workflows/beam_LoadTests_Python_CoGBK_Dataflow_Streaming.yml
index 45d75c85a83..b350f33471b 100644
--- a/.github/workflows/beam_LoadTests_Python_CoGBK_Dataflow_Streaming.yml
+++ b/.github/workflows/beam_LoadTests_Python_CoGBK_Dataflow_Streaming.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 15 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Python_CoGBK_Flink_Batch.yml
b/.github/workflows/beam_LoadTests_Python_CoGBK_Flink_Batch.yml
index 6967500335e..da6270bba33 100644
--- a/.github/workflows/beam_LoadTests_Python_CoGBK_Flink_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Python_CoGBK_Flink_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 15 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Python_Combine_Dataflow_Batch.yml
b/.github/workflows/beam_LoadTests_Python_Combine_Dataflow_Batch.yml
index 4a2fdfcadc5..84605beb2d5 100644
--- a/.github/workflows/beam_LoadTests_Python_Combine_Dataflow_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Python_Combine_Dataflow_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 15 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git
a/.github/workflows/beam_LoadTests_Python_Combine_Dataflow_Streaming.yml
b/.github/workflows/beam_LoadTests_Python_Combine_Dataflow_Streaming.yml
index f41d58bf217..ec193f06a46 100644
--- a/.github/workflows/beam_LoadTests_Python_Combine_Dataflow_Streaming.yml
+++ b/.github/workflows/beam_LoadTests_Python_Combine_Dataflow_Streaming.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 5 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Python_Combine_Flink_Batch.yml
b/.github/workflows/beam_LoadTests_Python_Combine_Flink_Batch.yml
index 0fd5a819b19..f9acafdc3af 100644
--- a/.github/workflows/beam_LoadTests_Python_Combine_Flink_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Python_Combine_Flink_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 15 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git
a/.github/workflows/beam_LoadTests_Python_Combine_Flink_Streaming.yml
b/.github/workflows/beam_LoadTests_Python_Combine_Flink_Streaming.yml
index 1b6d691e4a6..f279b78ce4a 100644
--- a/.github/workflows/beam_LoadTests_Python_Combine_Flink_Streaming.yml
+++ b/.github/workflows/beam_LoadTests_Python_Combine_Flink_Streaming.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 15 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git
a/.github/workflows/beam_LoadTests_Python_FnApiRunner_Microbenchmark.yml
b/.github/workflows/beam_LoadTests_Python_FnApiRunner_Microbenchmark.yml
index 60f8422aed0..8f17c86668e 100644
--- a/.github/workflows/beam_LoadTests_Python_FnApiRunner_Microbenchmark.yml
+++ b/.github/workflows/beam_LoadTests_Python_FnApiRunner_Microbenchmark.yml
@@ -20,7 +20,7 @@ on:
- cron: '0 */6 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Python_GBK_Dataflow_Batch.yml
b/.github/workflows/beam_LoadTests_Python_GBK_Dataflow_Batch.yml
index ed63e9650e7..c00f5105191 100644
--- a/.github/workflows/beam_LoadTests_Python_GBK_Dataflow_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Python_GBK_Dataflow_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 15 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Python_GBK_Dataflow_Streaming.yml
b/.github/workflows/beam_LoadTests_Python_GBK_Dataflow_Streaming.yml
index c553372c9c3..c17f4db46a0 100644
--- a/.github/workflows/beam_LoadTests_Python_GBK_Dataflow_Streaming.yml
+++ b/.github/workflows/beam_LoadTests_Python_GBK_Dataflow_Streaming.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 16 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Python_GBK_Flink_Batch.yml
b/.github/workflows/beam_LoadTests_Python_GBK_Flink_Batch.yml
index 0ce42ed31ea..667f67d9b9b 100644
--- a/.github/workflows/beam_LoadTests_Python_GBK_Flink_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Python_GBK_Flink_Batch.yml
@@ -20,7 +20,7 @@ on:
# - cron: '10 16 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git
a/.github/workflows/beam_LoadTests_Python_GBK_reiterate_Dataflow_Batch.yml
b/.github/workflows/beam_LoadTests_Python_GBK_reiterate_Dataflow_Batch.yml
index ce3aeb72428..9dc897b2365 100644
--- a/.github/workflows/beam_LoadTests_Python_GBK_reiterate_Dataflow_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Python_GBK_reiterate_Dataflow_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 16 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git
a/.github/workflows/beam_LoadTests_Python_GBK_reiterate_Dataflow_Streaming.yml
b/.github/workflows/beam_LoadTests_Python_GBK_reiterate_Dataflow_Streaming.yml
index 18476e5172f..c1be960d9b5 100644
---
a/.github/workflows/beam_LoadTests_Python_GBK_reiterate_Dataflow_Streaming.yml
+++
b/.github/workflows/beam_LoadTests_Python_GBK_reiterate_Dataflow_Streaming.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 16 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Python_ParDo_Dataflow_Batch.yml
b/.github/workflows/beam_LoadTests_Python_ParDo_Dataflow_Batch.yml
index e0b5a0a3075..8632c6f6e84 100644
--- a/.github/workflows/beam_LoadTests_Python_ParDo_Dataflow_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Python_ParDo_Dataflow_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 16 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git
a/.github/workflows/beam_LoadTests_Python_ParDo_Dataflow_Streaming.yml
b/.github/workflows/beam_LoadTests_Python_ParDo_Dataflow_Streaming.yml
index be19a46d381..c25109b5739 100644
--- a/.github/workflows/beam_LoadTests_Python_ParDo_Dataflow_Streaming.yml
+++ b/.github/workflows/beam_LoadTests_Python_ParDo_Dataflow_Streaming.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 16 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Python_ParDo_Flink_Batch.yml
b/.github/workflows/beam_LoadTests_Python_ParDo_Flink_Batch.yml
index 28834c4ac3a..6d85bd91611 100644
--- a/.github/workflows/beam_LoadTests_Python_ParDo_Flink_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Python_ParDo_Flink_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 16 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Python_ParDo_Flink_Streaming.yml
b/.github/workflows/beam_LoadTests_Python_ParDo_Flink_Streaming.yml
index 4437eb8e159..56f463046ec 100644
--- a/.github/workflows/beam_LoadTests_Python_ParDo_Flink_Streaming.yml
+++ b/.github/workflows/beam_LoadTests_Python_ParDo_Flink_Streaming.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 16 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git
a/.github/workflows/beam_LoadTests_Python_SideInput_Dataflow_Batch.yml
b/.github/workflows/beam_LoadTests_Python_SideInput_Dataflow_Batch.yml
index 143ded56061..1e8db94e2e3 100644
--- a/.github/workflows/beam_LoadTests_Python_SideInput_Dataflow_Batch.yml
+++ b/.github/workflows/beam_LoadTests_Python_SideInput_Dataflow_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 16 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_LoadTests_Python_Smoke.yml
b/.github/workflows/beam_LoadTests_Python_Smoke.yml
index 86638cfd6a8..f217ca2ac0f 100644
--- a/.github/workflows/beam_LoadTests_Python_Smoke.yml
+++ b/.github/workflows/beam_LoadTests_Python_Smoke.yml
@@ -18,7 +18,7 @@ name: LoadTests Python Smoke
on:
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_MetricsCredentialsRotation.yml
b/.github/workflows/beam_MetricsCredentialsRotation.yml
index 74da6fcc296..caebf54f1ee 100644
--- a/.github/workflows/beam_MetricsCredentialsRotation.yml
+++ b/.github/workflows/beam_MetricsCredentialsRotation.yml
@@ -20,7 +20,7 @@ on:
- cron: '0 1 1 * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_Metrics_Report.yml
b/.github/workflows/beam_Metrics_Report.yml
index 6c1ed828ff4..fb76c34b74a 100644
--- a/.github/workflows/beam_Metrics_Report.yml
+++ b/.github/workflows/beam_Metrics_Report.yml
@@ -33,7 +33,7 @@ env:
GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GE_CACHE_USERNAME }}
GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GE_CACHE_PASSWORD }}
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_PerformanceTests_AvroIOIT.yml
b/.github/workflows/beam_PerformanceTests_AvroIOIT.yml
index 3d5816f432d..fd834db858e 100644
--- a/.github/workflows/beam_PerformanceTests_AvroIOIT.yml
+++ b/.github/workflows/beam_PerformanceTests_AvroIOIT.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 9/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_AvroIOIT_HDFS.yml
b/.github/workflows/beam_PerformanceTests_AvroIOIT_HDFS.yml
index f7e326d744b..bc97ac97898 100644
--- a/.github/workflows/beam_PerformanceTests_AvroIOIT_HDFS.yml
+++ b/.github/workflows/beam_PerformanceTests_AvroIOIT_HDFS.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 9/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git
a/.github/workflows/beam_PerformanceTests_BigQueryIO_Batch_Java_Avro.yml
b/.github/workflows/beam_PerformanceTests_BigQueryIO_Batch_Java_Avro.yml
index 71b9405c233..c700194f9dc 100644
--- a/.github/workflows/beam_PerformanceTests_BigQueryIO_Batch_Java_Avro.yml
+++ b/.github/workflows/beam_PerformanceTests_BigQueryIO_Batch_Java_Avro.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 9/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git
a/.github/workflows/beam_PerformanceTests_BigQueryIO_Batch_Java_Json.yml
b/.github/workflows/beam_PerformanceTests_BigQueryIO_Batch_Java_Json.yml
index 53e0d26c2e4..9e0add788fd 100644
--- a/.github/workflows/beam_PerformanceTests_BigQueryIO_Batch_Java_Json.yml
+++ b/.github/workflows/beam_PerformanceTests_BigQueryIO_Batch_Java_Json.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 9/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git
a/.github/workflows/beam_PerformanceTests_BigQueryIO_Streaming_Java.yml
b/.github/workflows/beam_PerformanceTests_BigQueryIO_Streaming_Java.yml
index 690a126635a..0ebb4ac9395 100644
--- a/.github/workflows/beam_PerformanceTests_BigQueryIO_Streaming_Java.yml
+++ b/.github/workflows/beam_PerformanceTests_BigQueryIO_Streaming_Java.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 9/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_BiqQueryIO_Read_Python.yml
b/.github/workflows/beam_PerformanceTests_BiqQueryIO_Read_Python.yml
index 14ad834b970..145a2e1c156 100644
--- a/.github/workflows/beam_PerformanceTests_BiqQueryIO_Read_Python.yml
+++ b/.github/workflows/beam_PerformanceTests_BiqQueryIO_Read_Python.yml
@@ -20,7 +20,7 @@ on:
- cron: '30 9 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git
a/.github/workflows/beam_PerformanceTests_BiqQueryIO_Write_Python_Batch.yml
b/.github/workflows/beam_PerformanceTests_BiqQueryIO_Write_Python_Batch.yml
index b157b566784..3cbce2bb14b 100644
--- a/.github/workflows/beam_PerformanceTests_BiqQueryIO_Write_Python_Batch.yml
+++ b/.github/workflows/beam_PerformanceTests_BiqQueryIO_Write_Python_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '30 9 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_Cdap.yml
b/.github/workflows/beam_PerformanceTests_Cdap.yml
index 36da99d9f42..89888685604 100644
--- a/.github/workflows/beam_PerformanceTests_Cdap.yml
+++ b/.github/workflows/beam_PerformanceTests_Cdap.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 9/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_Compressed_TextIOIT.yml
b/.github/workflows/beam_PerformanceTests_Compressed_TextIOIT.yml
index 9dcd9868fbf..178b2f13ecd 100644
--- a/.github/workflows/beam_PerformanceTests_Compressed_TextIOIT.yml
+++ b/.github/workflows/beam_PerformanceTests_Compressed_TextIOIT.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 9/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git
a/.github/workflows/beam_PerformanceTests_Compressed_TextIOIT_HDFS.yml
b/.github/workflows/beam_PerformanceTests_Compressed_TextIOIT_HDFS.yml
index 9343cbc6b47..77a299e1683 100644
--- a/.github/workflows/beam_PerformanceTests_Compressed_TextIOIT_HDFS.yml
+++ b/.github/workflows/beam_PerformanceTests_Compressed_TextIOIT_HDFS.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 9/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_HadoopFormat.yml
b/.github/workflows/beam_PerformanceTests_HadoopFormat.yml
index 7e4ba8d23d3..e5cdb927679 100644
--- a/.github/workflows/beam_PerformanceTests_HadoopFormat.yml
+++ b/.github/workflows/beam_PerformanceTests_HadoopFormat.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 10/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_JDBC.yml
b/.github/workflows/beam_PerformanceTests_JDBC.yml
index 5c5e8d2400e..538895bb4fb 100644
--- a/.github/workflows/beam_PerformanceTests_JDBC.yml
+++ b/.github/workflows/beam_PerformanceTests_JDBC.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 10/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_Kafka_IO.yml
b/.github/workflows/beam_PerformanceTests_Kafka_IO.yml
index 5434c383fdd..e1f6769367a 100644
--- a/.github/workflows/beam_PerformanceTests_Kafka_IO.yml
+++ b/.github/workflows/beam_PerformanceTests_Kafka_IO.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 10/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_ManyFiles_TextIOIT.yml
b/.github/workflows/beam_PerformanceTests_ManyFiles_TextIOIT.yml
index a41ba911410..0fca71c8ffe 100644
--- a/.github/workflows/beam_PerformanceTests_ManyFiles_TextIOIT.yml
+++ b/.github/workflows/beam_PerformanceTests_ManyFiles_TextIOIT.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 10/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git
a/.github/workflows/beam_PerformanceTests_ManyFiles_TextIOIT_HDFS.yml
b/.github/workflows/beam_PerformanceTests_ManyFiles_TextIOIT_HDFS.yml
index 6f7f4b2c340..eabbabbfe01 100644
--- a/.github/workflows/beam_PerformanceTests_ManyFiles_TextIOIT_HDFS.yml
+++ b/.github/workflows/beam_PerformanceTests_ManyFiles_TextIOIT_HDFS.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 10/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_MongoDBIO_IT.yml
b/.github/workflows/beam_PerformanceTests_MongoDBIO_IT.yml
index 296058d9fc9..c015a09e8a6 100644
--- a/.github/workflows/beam_PerformanceTests_MongoDBIO_IT.yml
+++ b/.github/workflows/beam_PerformanceTests_MongoDBIO_IT.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 10/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_ParquetIOIT.yml
b/.github/workflows/beam_PerformanceTests_ParquetIOIT.yml
index aa5833f94d3..ee5dbe732ca 100644
--- a/.github/workflows/beam_PerformanceTests_ParquetIOIT.yml
+++ b/.github/workflows/beam_PerformanceTests_ParquetIOIT.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 10/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_ParquetIOIT_HDFS.yml
b/.github/workflows/beam_PerformanceTests_ParquetIOIT_HDFS.yml
index ab277712987..84a87b636d6 100644
--- a/.github/workflows/beam_PerformanceTests_ParquetIOIT_HDFS.yml
+++ b/.github/workflows/beam_PerformanceTests_ParquetIOIT_HDFS.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 10/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git
a/.github/workflows/beam_PerformanceTests_PubsubIOIT_Python_Streaming.yml
b/.github/workflows/beam_PerformanceTests_PubsubIOIT_Python_Streaming.yml
index 72c9783790f..6d37ca7b517 100644
--- a/.github/workflows/beam_PerformanceTests_PubsubIOIT_Python_Streaming.yml
+++ b/.github/workflows/beam_PerformanceTests_PubsubIOIT_Python_Streaming.yml
@@ -20,7 +20,7 @@ on:
- cron: '30 10 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git
a/.github/workflows/beam_PerformanceTests_SQLBigQueryIO_Batch_Java.yml
b/.github/workflows/beam_PerformanceTests_SQLBigQueryIO_Batch_Java.yml
index bf573fa5f9a..51d76a185d4 100644
--- a/.github/workflows/beam_PerformanceTests_SQLBigQueryIO_Batch_Java.yml
+++ b/.github/workflows/beam_PerformanceTests_SQLBigQueryIO_Batch_Java.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 11/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_SingleStoreIO.yml
b/.github/workflows/beam_PerformanceTests_SingleStoreIO.yml
index a444a88a1ea..6f98edd1aab 100644
--- a/.github/workflows/beam_PerformanceTests_SingleStoreIO.yml
+++ b/.github/workflows/beam_PerformanceTests_SingleStoreIO.yml
@@ -22,7 +22,7 @@ on:
- cron: '0 */12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git
a/.github/workflows/beam_PerformanceTests_SpannerIO_Read_2GB_Python.yml
b/.github/workflows/beam_PerformanceTests_SpannerIO_Read_2GB_Python.yml
index e27ccd91c63..2af5d93c5d3 100644
--- a/.github/workflows/beam_PerformanceTests_SpannerIO_Read_2GB_Python.yml
+++ b/.github/workflows/beam_PerformanceTests_SpannerIO_Read_2GB_Python.yml
@@ -20,7 +20,7 @@ on:
- cron: '30 10 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git
a/.github/workflows/beam_PerformanceTests_SpannerIO_Write_2GB_Python_Batch.yml
b/.github/workflows/beam_PerformanceTests_SpannerIO_Write_2GB_Python_Batch.yml
index 68ae38d8de4..4ca1926aba2 100644
---
a/.github/workflows/beam_PerformanceTests_SpannerIO_Write_2GB_Python_Batch.yml
+++
b/.github/workflows/beam_PerformanceTests_SpannerIO_Write_2GB_Python_Batch.yml
@@ -20,7 +20,7 @@ on:
- cron: '30 11 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_SparkReceiver_IO.yml
b/.github/workflows/beam_PerformanceTests_SparkReceiver_IO.yml
index ade25aacde3..0732af687cc 100644
--- a/.github/workflows/beam_PerformanceTests_SparkReceiver_IO.yml
+++ b/.github/workflows/beam_PerformanceTests_SparkReceiver_IO.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 11/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_TFRecordIOIT.yml
b/.github/workflows/beam_PerformanceTests_TFRecordIOIT.yml
index b7db2577e9b..dc1738a7edc 100644
--- a/.github/workflows/beam_PerformanceTests_TFRecordIOIT.yml
+++ b/.github/workflows/beam_PerformanceTests_TFRecordIOIT.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 11/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_TFRecordIOIT_HDFS.yml
b/.github/workflows/beam_PerformanceTests_TFRecordIOIT_HDFS.yml
index 9808f89b4d4..1773caca2f3 100644
--- a/.github/workflows/beam_PerformanceTests_TFRecordIOIT_HDFS.yml
+++ b/.github/workflows/beam_PerformanceTests_TFRecordIOIT_HDFS.yml
@@ -22,7 +22,7 @@ on:
# - cron: '50 11/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_TextIOIT.yml
b/.github/workflows/beam_PerformanceTests_TextIOIT.yml
index ebf57d7ba7d..ff767ac1ef6 100644
--- a/.github/workflows/beam_PerformanceTests_TextIOIT.yml
+++ b/.github/workflows/beam_PerformanceTests_TextIOIT.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 11/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_TextIOIT_HDFS.yml
b/.github/workflows/beam_PerformanceTests_TextIOIT_HDFS.yml
index a29d3ecb69a..48c43914f18 100644
--- a/.github/workflows/beam_PerformanceTests_TextIOIT_HDFS.yml
+++ b/.github/workflows/beam_PerformanceTests_TextIOIT_HDFS.yml
@@ -20,7 +20,7 @@ on:
- cron: '10 11/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_TextIOIT_Python.yml
b/.github/workflows/beam_PerformanceTests_TextIOIT_Python.yml
index 8ab9e611b89..ddf2fb44fef 100644
--- a/.github/workflows/beam_PerformanceTests_TextIOIT_Python.yml
+++ b/.github/workflows/beam_PerformanceTests_TextIOIT_Python.yml
@@ -20,7 +20,7 @@ on:
- cron: '30 11 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git
a/.github/workflows/beam_PerformanceTests_WordCountIT_PythonVersions.yml
b/.github/workflows/beam_PerformanceTests_WordCountIT_PythonVersions.yml
index 95339bfe2c1..56de705c3fe 100644
--- a/.github/workflows/beam_PerformanceTests_WordCountIT_PythonVersions.yml
+++ b/.github/workflows/beam_PerformanceTests_WordCountIT_PythonVersions.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 11/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_XmlIOIT.yml
b/.github/workflows/beam_PerformanceTests_XmlIOIT.yml
index 472c832b94e..88360c1ea53 100644
--- a/.github/workflows/beam_PerformanceTests_XmlIOIT.yml
+++ b/.github/workflows/beam_PerformanceTests_XmlIOIT.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 11/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_XmlIOIT_HDFS.yml
b/.github/workflows/beam_PerformanceTests_XmlIOIT_HDFS.yml
index a685796c4f4..00b3f649387 100644
--- a/.github/workflows/beam_PerformanceTests_XmlIOIT_HDFS.yml
+++ b/.github/workflows/beam_PerformanceTests_XmlIOIT_HDFS.yml
@@ -20,7 +20,7 @@ on:
- cron: '50 11/12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
diff --git a/.github/workflows/beam_PerformanceTests_xlang_KafkaIO_Python.yml
b/.github/workflows/beam_PerformanceTests_xlang_KafkaIO_Python.yml
index 5adb09f2462..b145818764e 100644
--- a/.github/workflows/beam_PerformanceTests_xlang_KafkaIO_Python.yml
+++ b/.github/workflows/beam_PerformanceTests_xlang_KafkaIO_Python.yml
@@ -20,7 +20,7 @@ on:
- cron: '30 11 * * *'
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_PostRelease_NightlySnapshot.yml
b/.github/workflows/beam_PostRelease_NightlySnapshot.yml
index d119dfb7754..31f9d56caa2 100644
--- a/.github/workflows/beam_PostRelease_NightlySnapshot.yml
+++ b/.github/workflows/beam_PostRelease_NightlySnapshot.yml
@@ -29,7 +29,7 @@ on:
schedule:
- cron: '15 16 * * *'
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_Prober_CommunityMetrics.yml
b/.github/workflows/beam_Prober_CommunityMetrics.yml
index d4f055eb13a..432f297e163 100644
--- a/.github/workflows/beam_Prober_CommunityMetrics.yml
+++ b/.github/workflows/beam_Prober_CommunityMetrics.yml
@@ -22,7 +22,7 @@ on:
- cron: '0 */6 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_Publish_BeamMetrics.yml
b/.github/workflows/beam_Publish_BeamMetrics.yml
index 99c47429892..94bebef827b 100644
--- a/.github/workflows/beam_Publish_BeamMetrics.yml
+++ b/.github/workflows/beam_Publish_BeamMetrics.yml
@@ -20,7 +20,7 @@ on:
- cron: '24 2 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_Publish_Beam_SDK_Snapshots.yml
b/.github/workflows/beam_Publish_Beam_SDK_Snapshots.yml
index 2c58b340fb3..ed4dbeb357c 100644
--- a/.github/workflows/beam_Publish_Beam_SDK_Snapshots.yml
+++ b/.github/workflows/beam_Publish_Beam_SDK_Snapshots.yml
@@ -20,7 +20,7 @@ on:
- cron: '0 */4 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_Publish_Docker_Snapshots.yml
b/.github/workflows/beam_Publish_Docker_Snapshots.yml
index 414901df944..10dbc36c541 100644
--- a/.github/workflows/beam_Publish_Docker_Snapshots.yml
+++ b/.github/workflows/beam_Publish_Docker_Snapshots.yml
@@ -20,7 +20,7 @@ on:
- cron: '0 13 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_Publish_Website.yml
b/.github/workflows/beam_Publish_Website.yml
index b16b19bf589..c5030759ea2 100644
--- a/.github/workflows/beam_Publish_Website.yml
+++ b/.github/workflows/beam_Publish_Website.yml
@@ -20,7 +20,7 @@ on:
- cron: '30 5/6 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_Python_CostBenchmarks_Dataflow.yml
b/.github/workflows/beam_Python_CostBenchmarks_Dataflow.yml
index 2752d879cbd..a1cf2f3d0b3 100644
--- a/.github/workflows/beam_Python_CostBenchmarks_Dataflow.yml
+++ b/.github/workflows/beam_Python_CostBenchmarks_Dataflow.yml
@@ -20,7 +20,7 @@ on:
- cron: '30 18 * * 6' # Run at 6:30 pm UTC on Saturdays
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_Python_ValidatesContainer_Dataflow_ARM.yml
b/.github/workflows/beam_Python_ValidatesContainer_Dataflow_ARM.yml
index a65428353d1..f93ef9001a1 100644
--- a/.github/workflows/beam_Python_ValidatesContainer_Dataflow_ARM.yml
+++ b/.github/workflows/beam_Python_ValidatesContainer_Dataflow_ARM.yml
@@ -20,7 +20,7 @@ on:
- cron: '0 */6 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_Release_NightlySnapshot.yml
b/.github/workflows/beam_Release_NightlySnapshot.yml
index 37b9a9d6d39..7eb84c0c2c8 100644
--- a/.github/workflows/beam_Release_NightlySnapshot.yml
+++ b/.github/workflows/beam_Release_NightlySnapshot.yml
@@ -20,7 +20,7 @@ on:
- cron: '15 12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_Release_Python_NightlySnapshot.yml
b/.github/workflows/beam_Release_Python_NightlySnapshot.yml
index 51537049f7a..3ac0d9da8ed 100644
--- a/.github/workflows/beam_Release_Python_NightlySnapshot.yml
+++ b/.github/workflows/beam_Release_Python_NightlySnapshot.yml
@@ -20,7 +20,7 @@ on:
- cron: '15 12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_StressTests_Java_BigQueryIO.yml
b/.github/workflows/beam_StressTests_Java_BigQueryIO.yml
index 8f1ef8f034a..75d158765cb 100644
--- a/.github/workflows/beam_StressTests_Java_BigQueryIO.yml
+++ b/.github/workflows/beam_StressTests_Java_BigQueryIO.yml
@@ -20,7 +20,7 @@ on:
- cron: '0 10 * * 6'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_StressTests_Java_BigTableIO.yml
b/.github/workflows/beam_StressTests_Java_BigTableIO.yml
index d10d547e20a..222a90c72be 100644
--- a/.github/workflows/beam_StressTests_Java_BigTableIO.yml
+++ b/.github/workflows/beam_StressTests_Java_BigTableIO.yml
@@ -20,7 +20,7 @@ on:
- cron: '0 16 * * 6'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_StressTests_Java_KafkaIO.yml
b/.github/workflows/beam_StressTests_Java_KafkaIO.yml
index 9710f36daca..f3992f554ff 100644
--- a/.github/workflows/beam_StressTests_Java_KafkaIO.yml
+++ b/.github/workflows/beam_StressTests_Java_KafkaIO.yml
@@ -20,7 +20,7 @@ on:
- cron: '0 14 * * 0'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_StressTests_Java_PubSubIO.yml
b/.github/workflows/beam_StressTests_Java_PubSubIO.yml
index c599058f28c..705d6fb1a0f 100644
--- a/.github/workflows/beam_StressTests_Java_PubSubIO.yml
+++ b/.github/workflows/beam_StressTests_Java_PubSubIO.yml
@@ -20,7 +20,7 @@ on:
- cron: '0 22 * * 6'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
diff --git a/.github/workflows/beam_StressTests_Java_SpannerIO.yml
b/.github/workflows/beam_StressTests_Java_SpannerIO.yml
index 3f53c335799..2f7fc6dbdf5 100644
--- a/.github/workflows/beam_StressTests_Java_SpannerIO.yml
+++ b/.github/workflows/beam_StressTests_Java_SpannerIO.yml
@@ -20,7 +20,7 @@ on:
- cron: '0 22 * * 6'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions
which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
