Skip to content

Commit 5bb51dd

Browse files
tacaswelltacaswell
committed
CI: Restrict default permissions
Reduces risk of arbitrary code is run by attacker.
1 parent 41cb4a9 commit 5bb51dd

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

‎.github/workflows/build.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,6 @@
11
name: build
2+
permissions:
3+
contents: read
24

35
on: [push, pull_request]
46

0 commit comments

Comments
 (0)