ci: restrict ci.yml workflow permissions to contents: read (#233)

2026-08-04 15:44:09 +00:00 · 2026-04-07 10:44:59 +02:00
parent 54decaf3e1
commit f8e090c7c3
1 changed files with 3 additions and 0 deletions
@@ -6,6 +6,9 @@ on:
  pull_request:
    branches: [main]

+permissions:
+  contents: read
+
 concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true