From 117dac0c497ada3e47224a27667ded9fd76c993c Mon Sep 17 00:00:00 2001
From: Drew Roen <102626803+drewroengoogle@users.noreply.github.com>
Date: Thu, 26 May 2022 14:00:36 -0500
Subject: [PATCH] Update mirror.yml to default to read only (#1285)

---
 .github/workflows/mirror.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml
index 433624a31..6a5f396bd 100644
--- a/.github/workflows/mirror.yml
+++ b/.github/workflows/mirror.yml
@@ -8,6 +8,9 @@ on:
     branches:
       - 'main'
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   mirror_job:
     permissions: