I've requested that ASF Infra. change the default workflow permissions for our repository to read-only. Please let me know if you see any unexpected failures: There is a chance this could cause existing workflows to fail.
Details: https://issues.apache.org/jira/browse/HADOOP-19870 I will reply to this thread when the change is complete and we've verified github actions are working normally. This change is in line with current best practices, and is the default for new repositories. Ours is old enough that we likely have the old defaults which include write permissions. Read-only defaults just require us to explicitly declare the write permissions in the workflows that need them. Thank you, Aaron
