From 059f61c700a3a4a17d32d1ff82255b3a4f85c0bb Mon Sep 17 00:00:00 2001
From: fraxken <gentilhomme.thomas@gmail.com>
Date: Thu, 28 Mar 2024 16:02:58 +0100
Subject: [PATCH] fix(workflows): missing top-level content.read permissions

---
 .github/workflows/nightly.yml | 3 +++
 .github/workflows/test.yml    | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index deabbc6dc78..56b194771b1 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -5,6 +5,9 @@ on:
   schedule:
     - cron: "0 10 * * *"
 
+permissions:
+  contents: read
+
 jobs:
   test:
     if: github.repository == 'nodejs/undici'
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 9cebbb20bef..530a10cbb57 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -10,6 +10,9 @@ on:
         required: true
         type: string
 
+permissions:
+  contents: read
+
 jobs:
   test:
     name: Test with Node.js ${{ inputs.node-version }} on ${{ inputs.runs-on }}