Add 'contents: read' to workflow permissions to increase the OpenSSF scorecard of the repo #1880
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Proposed Changes
These changes are being introduced to increase the repository's score that is calculated by the OpenSSF Scorecard (GitHub repo) tool.
This Pull Request updates the top-level permissions configuration within repo's GitHub workflows. It sets the default contents permission to read for the workflow token. The changes were done according to the recommendations from Scorecard regarding the token permissions and the discussion of this repository.
Types of Changes
Marked it as Other, but it is not the best choice. I would appreciate a recommendation regarding the right type.
Checklist
CONTRIBUTING.mddocument