ci: limit workflow tokens to repository reads (#866)

2026-09-23 22:03:07 +05:30
parent 51edc41546
commit 2e72fd4ded
3 changed files with 9 additions and 0 deletions
@@ -27,6 +27,9 @@ on:
      - '.github/workflows/distro-test-matrix.yml'
  workflow_dispatch:

+permissions:
+  contents: read
+
 # Six containers a run, on a filter that any shell script matches: a second
 # push should not leave the first one's matrix running to completion.
 concurrency: