Merge pull request #2888 from sashashura/patch-1

GitHub Workflows security hardening
hapijs · Feb 4, 2023 · ec9a319 · ec9a319
2 parents c09a2e4 + 492499f
commit ec9a319
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/ci-module.yml b/.github/workflows/ci-module.yml
@@ -7,6 +7,9 @@ on:
   pull_request:
   workflow_dispatch:
 
+permissions:
+  contents: read #  for actions/checkout
+
 jobs:
   test:
     uses: hapijs/.github/.github/workflows/ci-module.yml@master