ci(hardening): least-privilege GITHUB_TOKEN permissions across workflows

2026-08-25 01:45:15 +07:00
parent e6111c421f
commit a6618e6811
2 changed files with 6 additions and 0 deletions
@@ -11,6 +11,9 @@ on:
        required: true
        type: string

+permissions:
+  contents: read
+
 jobs:
  # ── Build binaries ───────────────────────────────────────────────────────────

@@ -6,6 +6,9 @@ on:
  pull_request:
    branches: [ "master" ]

+permissions:
+  contents: read
+
 env:
  CARGO_TERM_COLOR: always