Configure permissions for workflows

exasol · Mar 7, 2024 · 52088b7 · 52088b7
1 parent 83f3e1c
commit 52088b7
Show file tree

Hide file tree

Showing 5 changed files with 13 additions and 1 deletion.
diff --git a/.github/workflows/ci-build-next-java.yml b/.github/workflows/ci-build-next-java.yml
@@ -9,6 +9,9 @@ on:
 jobs:
   java-17-compatibility:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      checks: write # Allow scacap/action-surefire-report
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref }}
       cancel-in-progress: true

diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml
@@ -13,7 +13,7 @@ jobs:
         shell: "bash"
     permissions:
       contents: read
-      pull-requests: write # Allow scacap/action-surefire-report
+      checks: write # Allow scacap/action-surefire-report
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref }}
       cancel-in-progress: true

diff --git a/project-keeper/src/main/resources/templates/.github/workflows/ci-build-db-version-matrix.yml b/project-keeper/src/main/resources/templates/.github/workflows/ci-build-db-version-matrix.yml
@@ -12,6 +12,9 @@ jobs:
     defaults:
       run:
         shell: "bash"
+    permissions:
+      contents: read
+      checks: write # Allow scacap/action-surefire-report
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref }}-${{ matrix.exasol_db_version }}
       cancel-in-progress: true

diff --git a/project-keeper/src/main/resources/templates/.github/workflows/ci-build-next-java.yml b/project-keeper/src/main/resources/templates/.github/workflows/ci-build-next-java.yml
@@ -13,6 +13,9 @@ jobs:
     defaults:
       run:
         shell: "bash"
+    permissions:
+      contents: read
+      checks: write # Allow scacap/action-surefire-report
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref }}
       cancel-in-progress: true

diff --git a/project-keeper/src/main/resources/templates/.github/workflows/ci-build.yml b/project-keeper/src/main/resources/templates/.github/workflows/ci-build.yml
@@ -12,6 +12,9 @@ jobs:
     defaults:
       run:
         shell: "bash"
+    permissions:
+      contents: read
+      checks: write # Allow scacap/action-surefire-report
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref }}
       cancel-in-progress: true