[GitHub] Add minimum GitHub token permissions for workflows

Signed-off-by: Varun Sharma <varunsh@stepsecurity.io>
2 years ago · a0328112fb
parent bf829727ff
commit a0328112fb
2 changed files with 6 additions and 0 deletions
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@ -16,6 +16,9 @@ on:
      - 'fastlane/**'
      - .github/FUNDING.yml

+permissions:
+  contents: read
+
 jobs:
  build:

--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@ -16,6 +16,9 @@ on:
      - 'fastlane/**'
      - .github/FUNDING.yml

+permissions:
+  contents: read
+
 jobs:
  test:
    runs-on: macos-latest