[lucene] branch branch_9x updated: GitHub Workflows security hardening (#11789)

[dw...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

dweiss pushed a commit to branch branch_9x
in repository https://gitbox.apache.org/repos/asf/lucene.git


The following commit(s) were added to refs/heads/branch_9x by this push:
     new 90bc32a70f8 GitHub Workflows security hardening (#11789)
90bc32a70f8 is described below

commit 90bc32a70f8d32432f0ccfd4beebda8a75883629
Author: Alex <al...@gmail.com>
AuthorDate: Tue Sep 20 11:28:07 2022 +0200

    GitHub Workflows security hardening (#11789)
---
 .github/workflows/distribution.yml     | 3 +++
 .github/workflows/gradle-precommit.yml | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/.github/workflows/distribution.yml b/.github/workflows/distribution.yml
index 04c8b79ca81..449d0404237 100644
--- a/.github/workflows/distribution.yml
+++ b/.github/workflows/distribution.yml
@@ -13,6 +13,9 @@ on:
       - 'main'
       - 'branch_9x'
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
   test:
     name: Run distribution tests
diff --git a/.github/workflows/gradle-precommit.yml b/.github/workflows/gradle-precommit.yml
index 1618998e047..e6ffc2c0e7e 100644
--- a/.github/workflows/gradle-precommit.yml
+++ b/.github/workflows/gradle-precommit.yml
@@ -10,6 +10,9 @@ on:
     - main
     - branch_9x
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
   # This runs all validation checks without tests.
   checks: