This is an automated email from the ASF dual-hosted git repository.
chesnay pushed a commit to branch exp_github_actions
in repository https://gitbox.apache.org/repos/asf/flink.git
commit 4d38eead8d0ea6b69de9d77f9db547770939586a
Author: Chesnay Schepler <ches...@apache.org>
AuthorDate: Thu Apr 7 10:51:03 2022 +0200
Set read-only permission for all jobs
---
.github/workflows/flink-ci-template.yml | 2 ++
.github/workflows/hadoop-2.8.3-scala-2.12-workflow.yml | 2 ++
2 files changed, 4 insertions(+)
diff --git a/.github/workflows/flink-ci-template.yml
b/.github/workflows/flink-ci-template.yml
index 7db67b692d2..b7ef2481e8e 100644
--- a/.github/workflows/flink-ci-template.yml
+++ b/.github/workflows/flink-ci-template.yml
@@ -38,6 +38,8 @@ on:
glue_schema_secret_key:
required: false
+permissions: read-all
+
env:
FLINK_ARTIFACT_DIR: /root/
FLINK_ARTIFACT_FILENAME: flink_artifacts.tar.gz
diff --git a/.github/workflows/hadoop-2.8.3-scala-2.12-workflow.yml
b/.github/workflows/hadoop-2.8.3-scala-2.12-workflow.yml
index 071c95181bc..85bf88cba61 100644
--- a/.github/workflows/hadoop-2.8.3-scala-2.12-workflow.yml
+++ b/.github/workflows/hadoop-2.8.3-scala-2.12-workflow.yml
@@ -17,6 +17,8 @@ name: "Hadoop 2.8.3/Java 8/Scala 2.12"
on: [push, workflow_dispatch]
+permissions: read-all
+
jobs:
ci:
uses: ./.github/workflows/flink-ci-template.yml
