Restrict test workflow permissions to reading contents only

actions · Feb 22, 2023 · d6aec10 · d6aec10
1 parent f215e05
commit d6aec10
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -1,10 +1,14 @@
 name: Run Tests
+
 on:
   push:
     branches:
       - main
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest