OpenSSF best practices: set GITHUB_TOKEN permission to read-all

Ericsson / CodeCompass

CodeCompass is a software comprehension tool for large scale software written in C/C++ and Java

https://codecompass.net

GNU General Public License v3.0

521 stars 102 forks source link

Closed gkunz closed 1 year ago

gkunz commented 1 year ago

This change sets the GITHUB_TOKEN permission explicitly to read-only for GitHub actions.

Fixes #669