Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 13 additions & 0 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -400,6 +400,19 @@ jobs:
os: [ubuntu-22.04]
java: [temurin@8]
runs-on: ${{ matrix.os }}
permissions:
actions: none
checks: none
contents: write
deployments: none
id-token: none
issues: none
packages: read
pages: none
pull-requests: none
repository-projects: none
security-events: none
statuses: none
steps:
- name: Ignore line ending differences in git
if: contains(runner.os, 'windows')
Expand Down
4 changes: 4 additions & 0 deletions ci/src/main/scala/org/typelevel/sbt/TypelevelCiPlugin.scala
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,8 @@ import org.typelevel.sbt.NoPublishGlobalPlugin.noPublishModulesIgnore
import org.typelevel.sbt.gha.GenerativePlugin
import org.typelevel.sbt.gha.GenerativePlugin.autoImport._
import org.typelevel.sbt.gha.GitHubActionsPlugin
import org.typelevel.sbt.gha.PermissionValue
import org.typelevel.sbt.gha.Permissions
import org.typelevel.sbt.gha.WorkflowStep
import sbt._

Expand Down Expand Up @@ -156,6 +158,8 @@ object TypelevelCiPlugin extends AutoPlugin {
scalas = Nil,
sbtStepPreamble = Nil,
javas = List(githubWorkflowJavaVersions.value.head),
permissions = Some(
Permissions.Specify.defaultRestrictive.withContents(PermissionValue.Write)),
steps = githubWorkflowJobSetup.value.toList :+
WorkflowStep.DependencySubmission(
None,
Expand Down
Loading