ci: restrict workflow token to contents: read

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-16 16:10:51 -05:00
1 changed files with 3 additions and 0 deletions
@@ -6,6 +6,9 @@ on:
  pull_request:
    branches: [ main, develop ]

+permissions:
+  contents: read
+
 jobs:
  lint:
    runs-on: ubuntu-latest