build: harden ci.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
2022-09-25 19:14:47 +02:00 · 2022-09-25 19:14:47 +02:00 · 459310bc9b
parent 9d9e9e5c53
commit 459310bc9b
1 changed files with 3 additions and 0 deletions
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@ -3,6 +3,9 @@ on:
  pull_request:
  push:

+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
  test:
    strategy: