Skip to content

Commit 1c84761

Browse files
tacaswelltacaswell
committed
CI: Restrict default permissions
Reduces risk of arbitrary code is run by attacker.
1 parent df72989 commit 1c84761

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

‎.github/workflows/build.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,6 @@
11
name: build
2+
permissions:
3+
contents: read
24

35
on: [push, pull_request]
46

0 commit comments

Comments
 (0)