lock down CI token permissions (#196)

stachenov · Mar 31, 2024 · 6cbafcf · 6cbafcf
1 parent 3be74aa
commit 6cbafcf
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -6,6 +6,7 @@ on:
   pull_request:
 
 name: CI
+permissions: read-all
 
 env:
   # Customize the CMake build type here (Release, Debug, RelWithDebInfo, etc.)