build: harden ci.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
2022-12-08 20:26:53 +02:00 · 2022-12-08 20:26:53 +02:00 · e7e7103955
parent 1a201dd131
commit e7e7103955
1 changed files with 4 additions and 0 deletions
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@ -1,5 +1,9 @@
 name: CI
 on: [push, pull_request]
+
+permissions:
+  contents: read #  to fetch code (actions/checkout)
+
 jobs:
    lint:
        name: Lint