Restrict access for built-in github token

bugsnag · Dec 6, 2024 · 0a5eff3 · 0a5eff3
1 parent 7450e20
commit 0a5eff3
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/signing.yml b/.github/workflows/signing.yml
@@ -1,5 +1,7 @@
 name: Sign release assets
 
+permissions: read-all
+
 on:
   release:
     types: [released]