(qpid-proton) branch main updated: NO-JIRA: Restrict build workflow to read-only contents

[as...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

asf-gitbox-commits pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/qpid-proton.git


The following commit(s) were added to refs/heads/main by this push:
     new dde465d21 NO-JIRA: Restrict build workflow to read-only contents
dde465d21 is described below

commit dde465d218e06064600732e52f07923e38bfe6cb
Author: Alberto Maschietto <al...@gmail.com>
AuthorDate: Thu Sep 10 09:09:29 2026 +0400

    NO-JIRA: Restrict build workflow to read-only contents
    
    This was picked up by the Github CodeQL security scan.
---
 .github/workflows/build.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 01840a4b4..7da715f91 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -2,6 +2,9 @@ name: Build
 
 on: [push, pull_request, workflow_dispatch]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ${{ matrix.os }}


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@qpid.apache.org
For additional commands, e-mail: commits-help@qpid.apache.org