Add explicit permissions to GitHub Actions workflows#784

Open

szachovy wants to merge 1 commit into

mainfrom

security/workflow-permissions

SonarQubeCloud / SonarCloud Code Analysis failed May 7, 2026 in 15s

Quality Gate failed

Failed conditions
2 New issues
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Annotations

Check warning on line 7 in .github/workflows/changelogs.yml

sonarqubecloud / SonarCloud Code Analysis

Move this read permission from workflow level to job level.

See more on https://sonarcloud.io/project/issues?id=uyuni-project_uyuni-tools&issues=AZ4BievVllEXtoPR50po&open=AZ4BievVllEXtoPR50po&pullRequest=784

Check warning on line 8 in .github/workflows/changelogs.yml

sonarqubecloud / SonarCloud Code Analysis

Move this write permission from workflow level to job level.

See more on https://sonarcloud.io/project/issues?id=uyuni-project_uyuni-tools&issues=AZ4BievVllEXtoPR50pp&open=AZ4BievVllEXtoPR50pp&pullRequest=784

View more details on SonarQubeCloud