This is an automated email from the ASF dual-hosted git repository.
asf-gitbox-commits pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/qpid-proton.git
The following commit(s) were added to refs/heads/main by this push:
new dde465d21 NO-JIRA: Restrict build workflow to read-only contents
dde465d21 is described below
commit dde465d218e06064600732e52f07923e38bfe6cb
Author: Alberto Maschietto <[email protected]>
AuthorDate: Thu Sep 10 09:09:29 2026 +0400
NO-JIRA: Restrict build workflow to read-only contents
This was picked up by the Github CodeQL security scan.
---
.github/workflows/build.yml | 3 +++
1 file changed, 3 insertions(+)
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 01840a4b4..7da715f91 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -2,6 +2,9 @@ name: Build
on: [push, pull_request, workflow_dispatch]
+permissions:
+ contents: read
+
jobs:
build:
runs-on: ${{ matrix.os }}
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
