build: harden validate.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
2 years ago · 890fd6b8e0
parent 7ac625c344
commit 890fd6b8e0
1 changed files with 3 additions and 0 deletions
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@ -3,6 +3,9 @@ on:
  push:
  pull_request:

+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
  validate:
    name: Validate