Permissions

Author: slominskir

.github/workflows/cd.yaml

@@ -7,11 +7,15 @@ on:
 
 jobs:
   release:
+    permissions:
+      contents: write
     uses: jeffersonlab/java-workflows/.github/workflows/gh-release.yaml@v2
     with:
       files: build/libs/epics2web.war
 
   docker_publish:
+    permissions:
+      contents: read
     needs:
       - release
     uses: jeffersonlab/container-workflows/.github/workflows/docker-publish.yaml@v2

.github/workflows/ci.yaml

@@ -11,6 +11,9 @@ on:
     branches: [ main ]
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   build:
     uses: jeffersonlab/java-workflows/.github/workflows/unit-ci.yaml@v2

.github/workflows/dd.yaml

@@ -7,6 +7,10 @@ on:
     paths:
       - README.md
       - .github/workflows/dd.yaml
+
+permissions:
+  contents: read
+
 jobs:
   description:
     uses: jeffersonlab/container-workflows/.github/workflows/docker-description.yaml@v2