build: harden ci.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
4 years ago · 28f733b013
parent e4ec055d3d
commit 28f733b013
1 changed files with 2 additions and 0 deletions
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@ -1,5 +1,7 @@
 name: CI
 on: [push, pull_request]
+permissions:
+  contents: read # to fetch code (actions/checkout)
 jobs:
  Tests:
    runs-on: ${{ matrix.os }}