Restrict permissions given to Gradle-wrapper validation.

Fixes https://github.com/google/guava/security/code-scanning/22 Compare grpc/grpc-java#8212 RELNOTES=n/a PiperOrigin-RevId: 545771352
google · Jul 5, 2023 · 31c478f · 31c478f
1 parent 18fee9a
commit 31c478f
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/gradle-wrapper-validation.yml b/.github/workflows/gradle-wrapper-validation.yml
@@ -1,6 +1,9 @@
 name: "Validate Gradle Wrapper"
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   validation:
     name: "Validation"