From 6cbafcf5c63dd28263996d9a3b5bc5bbeeefddba Mon Sep 17 00:00:00 2001
From: cen1 <cen.is.imba@gmail.com>
Date: Sun, 31 Mar 2024 23:21:15 +0200
Subject: [PATCH] lock down CI token permissions (#196)

---
 .github/workflows/ci.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3a5b04e..409892b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,6 +6,7 @@ on:
   pull_request:
 
 name: CI
+permissions: read-all
 
 env:
   # Customize the CMake build type here (Release, Debug, RelWithDebInfo, etc.)