ci: Minimize permissions to workflows (#77)

abhinav · web-flow · commit d42b7a1b108b · 2023-03-20T05:40:59.000-07:00
Reduces the permissions available to GitHub Workflows to read-only since they don't do much otherwise. Resolves #76
diff --git a/.github/workflows/fossa.yaml b/.github/workflows/fossa.yaml
@@ -1,6 +1,9 @@
 name: FOSSA Analysis
 on: push
 
+permissions:
+  contents: read
+
 jobs:
 
   build:
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
@@ -7,6 +7,9 @@ on:
   pull_request:
     branches: ['*']
 
+permissions:
+  contents: read
+
 jobs:
 
   build:
