jbampton commented on PR #1976: URL: https://github.com/apache/sedona/pull/1976#issuecomment-2950785087
zizmor is a static analysis tool for GitHub Actions. It can find many common security issues in typical GitHub Actions CI/CD setups. So I ran zizmor here and it found that we did not have our permissions set on these workflows. https://github.com/zizmorcore/zizmor refs #1977 The other workflows that I did not modify already had: ``` permissions: contents: read ``` This is the example from zizmor:  So you can compare this PR to another previous PR and see the difference in the permissions. ## This PR:  ## Another previous PR:  -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
