This is an automated email from the ASF dual-hosted git repository.

jark pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/fluss.git


The following commit(s) were added to refs/heads/main by this push:
     new b99e3b6a [github] Limit read permission to license-check.yml workflow 
(#1312)
b99e3b6a is described below

commit b99e3b6abe0a3d308ab0acf13d430352939b46be
Author: Jark Wu <[email protected]>
AuthorDate: Sat Jul 12 17:22:24 2025 +0800

    [github] Limit read permission to license-check.yml workflow (#1312)
---
 .github/workflows/docs-check.yaml   | 6 ++++++
 .github/workflows/docs-deploy.yaml  | 2 ++
 .github/workflows/license-check.yml | 2 ++
 3 files changed, 10 insertions(+)

diff --git a/.github/workflows/docs-check.yaml 
b/.github/workflows/docs-check.yaml
index 921e8632..0572b84a 100644
--- a/.github/workflows/docs-check.yaml
+++ b/.github/workflows/docs-check.yaml
@@ -18,11 +18,17 @@
 
 # This workflow is meant for checking broken links in the documentation.
 name: Check Documentation
+permissions:
+  contents: read
 on:
   pull_request:
     branches: [main, release-*, ci-*]
     paths:
       - 'website/**'
+  push:
+    branches: [main, release-*, ci-*]
+    paths:
+      - 'website/**'
 
 jobs:
   test-deploy:
diff --git a/.github/workflows/docs-deploy.yaml 
b/.github/workflows/docs-deploy.yaml
index 17dd1b3a..f051938c 100644
--- a/.github/workflows/docs-deploy.yaml
+++ b/.github/workflows/docs-deploy.yaml
@@ -16,6 +16,8 @@
 # limitations under the License.
 
################################################################################
 name: Deploy Documentation
+permissions:
+  contents: read
 on:
   push:
     branches: [main, release-*]
diff --git a/.github/workflows/license-check.yml 
b/.github/workflows/license-check.yml
index efe169f8..22cef1e7 100644
--- a/.github/workflows/license-check.yml
+++ b/.github/workflows/license-check.yml
@@ -14,6 +14,8 @@
 # limitations under the License.
 
 name: Check License
+permissions:
+  contents: read
 
 on: [push, pull_request]
 

Reply via email to