8293368: GitHub Workflows security hardening

Reviewed-by: kcr, arapte
openjdk · Sep 16, 2022 · a27840e · a27840e · openjdk-notifier · Sep 16, 2022
1 parent 5e4552d
commit a27840e
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/submit.yml b/.github/workflows/submit.yml
@@ -48,6 +48,9 @@ on:
   # Enable triggering the workflow manually
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   validation:
     name: "Gradle Wrapper Validation"