mirror of
https://github.com/apache/cloudstack.git
synced 2025-10-26 08:42:29 +01:00
GitHub Workflows security hardening (#6762)
Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
parent
0ed4950896
commit
80c999cc81
4
.github/workflows/main-sonar-check.yml
vendored
4
.github/workflows/main-sonar-check.yml
vendored
@ -22,6 +22,10 @@ on:
|
||||
branches:
|
||||
- main
|
||||
|
||||
permissions:
|
||||
contents: read # to fetch code (actions/checkout)
|
||||
pull-requests: write # for sonar to comment on pull-request
|
||||
|
||||
jobs:
|
||||
build:
|
||||
name: Main Sonar JaCoCo Build
|
||||
|
||||
4
.github/workflows/sonar-check.yml
vendored
4
.github/workflows/sonar-check.yml
vendored
@ -26,6 +26,10 @@ concurrency:
|
||||
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
|
||||
cancel-in-progress: true
|
||||
|
||||
permissions:
|
||||
contents: read # to fetch code (actions/checkout)
|
||||
pull-requests: write # for sonar to comment on pull-request
|
||||
|
||||
jobs:
|
||||
build:
|
||||
if: github.repository == 'apache/cloudstack'
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user