build: harden ci.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
facebook · Dec 8, 2022 · aee5d72 · aee5d72
1 parent cedc3ac
commit aee5d72
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -3,6 +3,9 @@ on:
   - push
   - pull_request
 
+permissions:
+  contents: read #  to fetch code (actions/checkout)
+
 jobs:
   ci:
     name: "Build & Test (React v${{ matrix.react_version}})"