From 27213b34bbd9a47de010a1eebca4ee5667ca4719 Mon Sep 17 00:00:00 2001 From: Fo3N0Th1ng Date: Wed, 30 Jul 2025 21:53:39 +0800 Subject: [PATCH] ci: restrict the permissions to only read --- .github/workflows/ci.yml | 3 +++ .github/workflows/lint.yml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index dbf04bb3..b0aa4bd7 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -1,5 +1,8 @@ name: CI +permissions: + contents: read + on: pull_request: push: diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index c21c0ad7..18870b95 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -1,5 +1,8 @@ name: lint +permissions: + contents: read + on: pull_request: push: