gha: set default permissions to "read"

Signed-off-by: Sebastiaan van Stijn <[email protected]>
moby · Jan 2, 2025 · 905a8aa · 905a8aa
1 parent e3559a6
commit 905a8aa
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -1,4 +1,14 @@
 name: Test
+
+# Default to 'contents: read', which grants actions to read commits.
+#
+# If any permission is set, any permission not included in the list is
+# implicitly set to "none".
+#
+# see https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
+permissions:
+  contents: read
+
 on: [push, pull_request]
 jobs:
   test: