GitHub Workflows security hardening (#6762)

Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
Alex 2023-04-25 16:35:39 +02:00 committed by GitHub
parent 0ed4950896
commit 80c999cc81
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 8 additions and 0 deletions

View File

@ -22,6 +22,10 @@ on:
branches:
- main
permissions:
contents: read # to fetch code (actions/checkout)
pull-requests: write # for sonar to comment on pull-request
jobs:
build:
name: Main Sonar JaCoCo Build

View File

@ -26,6 +26,10 @@ concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true
permissions:
contents: read # to fetch code (actions/checkout)
pull-requests: write # for sonar to comment on pull-request
jobs:
build:
if: github.repository == 'apache/cloudstack'