build: set default permissions

2025-04-17 06:26:05 +02:00
1 changed files with 4 additions and 0 deletions
--- a/.github/workflows/ci-build.yml
+++ b/.github/workflows/ci-build.yml
@ -10,11 +10,15 @@ on:
 jobs:
  lint:
    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
    steps:
    - uses: actions/checkout@v4
    - uses: ludeeus/action-shellcheck@2.0.0
  build:
    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
    needs:
    - lint
    steps: