#733: Stricter permissions

(cherry picked from commit 77c98c917efd6ba97e571cd3dfc146344bd9e371)
This commit is contained in:
Harald Kuhr 2023-03-01 09:54:36 +01:00
parent 7b3f0254fd
commit b4db69859d

View File

@ -2,6 +2,8 @@ name: CI
on: [ push, pull_request ] on: [ push, pull_request ]
permissions: read-all
jobs: jobs:
test: test:
name: Test OpenJDK ${{ matrix.java }} on ${{ matrix.os }} name: Test OpenJDK ${{ matrix.java }} on ${{ matrix.os }}
@ -11,6 +13,8 @@ jobs:
os: [ ubuntu-latest, windows-latest, macos-latest ] os: [ ubuntu-latest, windows-latest, macos-latest ]
java: [ 8, 11, 17, 18 ] java: [ 8, 11, 17, 18 ]
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
permissions:
checks: write
steps: steps:
- uses: actions/checkout@v3 - uses: actions/checkout@v3
- uses: actions/setup-java@v3 - uses: actions/setup-java@v3
@ -31,6 +35,8 @@ jobs:
test_oracle: test_oracle:
name: Test Oracle JDK 8 with KCMS=${{ matrix.kcms }} name: Test Oracle JDK 8 with KCMS=${{ matrix.kcms }}
runs-on: ubuntu-latest runs-on: ubuntu-latest
permissions:
checks: write
strategy: strategy:
matrix: matrix:
kcms: [ true, false ] kcms: [ true, false ]