.github: allow only read permission in sonar-check.yml

This commit is contained in:
Wei Zhou 2023-02-23 13:47:48 +01:00
parent a3670496ad
commit 0457cc559e

View File

@ -19,6 +19,9 @@ name: Sonar Quality Check
on: [pull_request_target]
permissions:
contents: read
concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true