From 4fb6d703684c86411ac52f48bf3e570e51b28266 Mon Sep 17 00:00:00 2001 From: Daniel Garnier-Moiroux Date: Thu, 22 Oct 2026 18:29:58 +0200 Subject: [PATCH] Add GH workflow `content: read` permissions Signed-off-by: Daniel Garnier-Moiroux --- .github/workflows/ci.yml | 3 +++ .github/workflows/conformance.yml | 3 +++ .github/workflows/maven-central-release.yml | 3 +++ .github/workflows/publish-snapshot.yml | 3 +++ 4 files changed, 12 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index df65b4a20..b9f8b8f54 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -4,6 +4,9 @@ on: pull_request: {} workflow_dispatch: {} +permissions: + contents: read + jobs: build: name: Build and Test diff --git a/.github/workflows/conformance.yml b/.github/workflows/conformance.yml index c0c7b3e24..7014ada8a 100644 --- a/.github/workflows/conformance.yml +++ b/.github/workflows/conformance.yml @@ -6,6 +6,9 @@ on: branches: [main] workflow_dispatch: +permissions: + contents: read + env: CONFORMANCE: '@modelcontextprotocol/conformance@0.2.0-alpha.12' diff --git a/.github/workflows/maven-central-release.yml b/.github/workflows/maven-central-release.yml index 099b2ac7f..c637b09af 100644 --- a/.github/workflows/maven-central-release.yml +++ b/.github/workflows/maven-central-release.yml @@ -3,6 +3,9 @@ name: Release to Maven Central on: workflow_dispatch: +permissions: + contents: read + jobs: publish: runs-on: ubuntu-latest diff --git a/.github/workflows/publish-snapshot.yml b/.github/workflows/publish-snapshot.yml index bef449ebe..6eaf6529b 100644 --- a/.github/workflows/publish-snapshot.yml +++ b/.github/workflows/publish-snapshot.yml @@ -8,6 +8,9 @@ on: - 1.1.x - 2.1.x +permissions: + contents: read + jobs: build: name: Build branch