chore: scope GITHUB_TOKEN to contents: read in workflows

2026-07-21 17:10:03 +02:00 · 2026-05-13 02:29:43 +01:00
parent 20e75b97a7
commit 3db72651e0
1 changed files with 3 additions and 0 deletions
@@ -10,6 +10,9 @@ on:
    branches: [ 1.x ]
    paths:
      - CHANGELOG.md
+permissions:
+  contents: read
+
 jobs:
  build:
    runs-on: ubuntu-latest