build: set default permissions

2025-04-17 06:23:35 +02:00 · 2025-04-17 06:23:35 +02:00 · f6c87c4568
commit f6c87c4568
parent 2f980acbb3
1 changed files with 4 additions and 0 deletions
--- a/.github/workflows/ci-build.yml
+++ b/.github/workflows/ci-build.yml
@ -10,11 +10,15 @@ on:
 jobs:
  lint:
    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
    steps:
    - uses: actions/checkout@v4
    - uses: ludeeus/action-shellcheck@2.0.0
  build:
    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
    needs:
    - lint
    steps: