build: harden main.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
rust-lang · Sep 26, 2022 · 872dfea · 872dfea
1 parent b58edfa
commit 872dfea
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -7,6 +7,9 @@ on:
     branches:
       - master
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
   docker_linux_tier1:
     name: Docker Linux Tier1