ci: add minimum GitHub token permissions for workflow

Signed-off-by: Ashish Kurmi <akurmi@stepsecurity.io>
ckan · Sep 11, 2022 · 51c69e9 · 51c69e9
1 parent 290e9b0
commit 51c69e9
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/towncrier.yml b/.github/workflows/towncrier.yml
@@ -1,6 +1,9 @@
 name: Changelog entries
 on: [pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   towncrier:
     runs-on: ubuntu-latest