chore: Set permissions for GitHub actions (#1890)

Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
test-kitchen · May 24, 2022 · f7876ab · f7876ab
1 parent 02e3069
commit f7876ab
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/smoke.yml b/.github/workflows/smoke.yml
@@ -7,6 +7,9 @@ name: Smoke
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   linux:
     env: