(sedona) branch master updated: [CI] gha: set default workflow permissions (#1976)

[jiayu]

This is an automated email from the ASF dual-hosted git repository.

jiayu pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/sedona.git


The following commit(s) were added to refs/heads/master by this push:
     new adb2b0e9a0 [CI] gha: set default workflow permissions (#1976)
adb2b0e9a0 is described below

commit adb2b0e9a094ec1f10e6bbbf018976c6c590a4ac
Author: John Bampton <jbamp...@users.noreply.github.com>
AuthorDate: Sun Jun 8 09:05:46 2025 +1000

    [CI] gha: set default workflow permissions (#1976)
---
 .github/workflows/docs.yml              | 3 +++
 .github/workflows/first-interaction.yml | 3 +++
 .github/workflows/pyflink.yml           | 3 +++
 .github/workflows/python-wheel.yml      | 3 +++
 .github/workflows/r.yml                 | 3 +++
 5 files changed, 15 insertions(+)

diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index ef6fd8b9a2..f9ca1bc7db 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -26,6 +26,9 @@ on:
     branches:
       - '*'
 
+permissions:
+  contents: read
+
 env:
   MAVEN_OPTS: -Dmaven.wagon.httpconnectionManager.ttlSeconds=60
 
diff --git a/.github/workflows/first-interaction.yml 
b/.github/workflows/first-interaction.yml
index ef8dcd6da9..d23ecd7107 100644
--- a/.github/workflows/first-interaction.yml
+++ b/.github/workflows/first-interaction.yml
@@ -23,6 +23,9 @@ on:
   pull_request:
     types: [opened]
 
+permissions:
+  contents: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}
diff --git a/.github/workflows/pyflink.yml b/.github/workflows/pyflink.yml
index 572fec4051..2d4d103574 100644
--- a/.github/workflows/pyflink.yml
+++ b/.github/workflows/pyflink.yml
@@ -39,6 +39,9 @@ on:
       - 'python/**'
       - '.github/workflows/pyflink.yml'
 
+permissions:
+  contents: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
diff --git a/.github/workflows/python-wheel.yml 
b/.github/workflows/python-wheel.yml
index c0ccc0db67..850b0e11cd 100644
--- a/.github/workflows/python-wheel.yml
+++ b/.github/workflows/python-wheel.yml
@@ -39,6 +39,9 @@ on:
       - 'python/**'
       - '.github/workflows/python-wheel.yml'
 
+permissions:
+  contents: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}
diff --git a/.github/workflows/r.yml b/.github/workflows/r.yml
index 55951c4036..d57ebd0968 100644
--- a/.github/workflows/r.yml
+++ b/.github/workflows/r.yml
@@ -39,6 +39,9 @@ on:
       - 'R/**'
       - '.github/workflows/r.yml'
 
+permissions:
+  contents: read
+
 env:
   MAVEN_OPTS: -Dmaven.wagon.httpconnectionManager.ttlSeconds=60
   DO_NOT_TRACK: true