From 09ac3be11262df09e7bdd60730ba1b4ff5f4a691 Mon Sep 17 00:00:00 2001
From: Pere Miquel Brull <peremiquelbrull@gmail.com>
Date: Wed, 9 Nov 2022 15:53:10 +0100
Subject: [PATCH] Test workflow permissions (#8611)

---
 .github/workflows/java-checkstyle.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/java-checkstyle.yml b/.github/workflows/java-checkstyle.yml
index 896033773a3..ee79d1fcf94 100644
--- a/.github/workflows/java-checkstyle.yml
+++ b/.github/workflows/java-checkstyle.yml
@@ -19,6 +19,9 @@ on:
       - main
       - '0.[0-9]+.[0-9]+'
 
+permissions:
+  contents: read
+
 concurrency: 
   group: java-checkstyle-${{ github.head_ref }}
   cancel-in-progress: true
@@ -47,6 +50,8 @@ jobs:
           git diff-files --quiet
 
       - name: Create a comment in the PR with the instructions
+        permissions:
+          pull-requests: write
         if: steps.git.outcome != 'success'
         uses: peter-evans/create-or-update-comment@v1
         with: