Update main.yml

Assign code read-only perm to Packj action
ossillate-inc · Jan 18, 2023 · 80eaf11 · 80eaf11
1 parent 50ed61d
commit 80eaf11
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -7,6 +7,9 @@ on:
     branches:
       - main
 
+permissions:  # principle of least privilege (only code READ perms)
+  contents: read
+
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs: