build: harden main.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
junit-team · May 1, 2023 · 16228f3 · 16228f3
1 parent e50487c
commit 16228f3
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -8,6 +8,9 @@ on:
     branches:
       - '*'
 
+permissions:
+  contents: read #  to fetch code (actions/checkout)
+
 jobs:
 
   build-and-verify: