build: harden pull_request.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
4 months ago · 8064a1d3cd
parent ddb39dd0f4
commit 8064a1d3cd
1 changed files with 2 additions and 0 deletions
--- a/.github/workflows/pull_request.yml
+++ b/.github/workflows/pull_request.yml
@ -6,6 +6,8 @@ name: checks_pr
      - master
  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:
+permissions:
+  contents: read # to fetch code (actions/checkout)
 jobs:
  build:
    runs-on: ubuntu-latest