[StepSecurity] Apply security best practices

resoleve: #456 Signed-off-by: StepSecurity Bot <[email protected]>
eclipse-platform · May 16, 2023 · 5120d6a · 5120d6a
1 parent ad8b0df
commit 5120d6a
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -4,3 +4,9 @@ updates:
   directory: "/"
   schedule:
     interval: daily
+
+
+  - package-ecosystem: maven
+    directory: /
+    schedule:
+      interval: daily
diff --git a/.github/workflows/updateRelease.yml b/.github/workflows/updateRelease.yml
@@ -3,6 +3,9 @@ on:
   milestone:
     types: [created]
 
+permissions:
+  contents: read
+
 jobs:
   update:
     if: contains(github.event.milestone.description, 'Release')