From 288e5eaf1cf0ba2dad14207fb2e6b2d2b6da41e7 Mon Sep 17 00:00:00 2001 From: Guy Korland Date: Mon, 15 Apr 2024 12:12:56 +0300 Subject: [PATCH] fix #40 - don't content on external PRs --- .github/workflows/maven.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 9213ee2..fbbb838 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -14,6 +14,10 @@ on: pull_request: branches: [ "master" ] +permissions: + contents: write + + jobs: build: @@ -47,5 +51,6 @@ jobs: # Uploads the full dependency graph to GitHub to improve the quality of Dependabot alerts this repository can receive - name: Maven Dependency Tree Dependency Submission + if: github.token.permissions.contents == 'write' uses: advanced-security/maven-dependency-submission-action@v4.0.2