From 73ee7a830bbba10322bc9d652d63ad6211baab72 Mon Sep 17 00:00:00 2001 From: fraxken Date: Sat, 18 Mar 2023 15:44:13 +0100 Subject: [PATCH] fix(security): add missing workflow top level permissions --- .github/workflows/node.js.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml index d5aa073b..c4fa46df 100644 --- a/.github/workflows/node.js.yml +++ b/.github/workflows/node.js.yml @@ -5,6 +5,9 @@ on: branches: master pull_request: +permissions: + contents: read + jobs: test: runs-on: ubuntu-latest