test QA with no GITHUB_TOKEN permissions

SonarSource · Jul 24, 2024 · 3bf6e4b · 3bf6e4b
1 parent b7cc8bf
commit 3bf6e4b
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/workflows/qa.yml b/.github/workflows/qa.yml
@@ -12,6 +12,7 @@ jobs:
     name: >
       'args' input
     runs-on: ubuntu-latest
+    permissions: {}
     steps:
       - uses: actions/checkout@v4
         with:
@@ -29,6 +30,7 @@ jobs:
     name: >
       'projectBaseDir' input
     runs-on: ubuntu-latest
+    permissions: {}
     steps:
       - uses: actions/checkout@v4
         with:
@@ -49,6 +51,7 @@ jobs:
     name: >
       'SONAR_TOKEN' env var required
     runs-on: ubuntu-latest
+    permissions: {}
     steps:
       - uses: actions/checkout@v4
         with:
@@ -67,6 +70,7 @@ jobs:
     name: >
       Don't fail on Gradle project
     runs-on: ubuntu-latest
+    permissions: {}
     steps:
       - uses: actions/checkout@v4
         with:
@@ -87,6 +91,7 @@ jobs:
     name: >
       Don't fail on Kotlin Gradle project
     runs-on: ubuntu-latest
+    permissions: {}
     steps:
       - uses: actions/checkout@v4
         with:
@@ -107,6 +112,7 @@ jobs:
     name: >
       Don't fail on Maven project
     runs-on: ubuntu-latest
+    permissions: {}
     steps:
       - uses: actions/checkout@v4
         with:
@@ -127,6 +133,7 @@ jobs:
     name: >
       'RUNNER_DEBUG' is used
     runs-on: ubuntu-latest
+    permissions: {}
     steps:
       - uses: actions/checkout@v4
         with: