Restrict GITHUB_TOKEN permissions to minimum required #50

	name: Code tests & eval

	on:
	push:
	branches: [ main ]
	pull_request:
	branches: [ main ]

	permissions:
	contents: read

	jobs:
	build-modules:
	name: Build apps
	runs-on: ubuntu-latest
	steps:
	- name: Checkout source code
	uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4
	with:
	persist-credentials: false
	- name: Setup project and build environment
	uses: ./.github/actions/common-setup
	- name: Build modules
	run: ./gradlew assemble

	run-tests:
	name: Run tests
	runs-on: ubuntu-latest
	container: ubuntu
	steps:
	- name: Checkout source code
	uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4
	with:
	persist-credentials: false
	- name: Setup project and build environment
	uses: ./.github/actions/common-setup
	- name: Check code and run tests
	run: ./gradlew check

Provide feedback