From 5fe9deda93932632979233a89c395c54e109e876 Mon Sep 17 00:00:00 2001 From: sttk Date: Sat, 11 Apr 2026 19:34:02 +0900 Subject: [PATCH] cicd: added permissions to fix code scanning alerts --- .github/workflows/java-ci.yml | 3 +++ .github/workflows/javadoc.yml | 4 ++++ .github/workflows/publish.yml | 3 +++ 3 files changed, 10 insertions(+) diff --git a/.github/workflows/java-ci.yml b/.github/workflows/java-ci.yml index dbbeb3d..a8dc9df 100644 --- a/.github/workflows/java-ci.yml +++ b/.github/workflows/java-ci.yml @@ -1,5 +1,8 @@ name: Java CI +permissions: + contents: read + on: push: branches: [ '*', '*/*' ] diff --git a/.github/workflows/javadoc.yml b/.github/workflows/javadoc.yml index da3cecf..4a42f91 100644 --- a/.github/workflows/javadoc.yml +++ b/.github/workflows/javadoc.yml @@ -1,5 +1,9 @@ name: Javadoc +permissions: + contents: read + pages: write + on: release: types: [ created ] diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 2d65a1f..96b967b 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -1,5 +1,8 @@ name: Publish package to the Maven Central Repository +permissions: + contents: read + on: release: types: [ created ]