ci: declare contents:read on lint workflow

arpitjain099 · theory · commit ac9625ebd137 · 2026-05-18T15:34:18.000-07:00
Signed-off-by: David E. Wheeler &lt;david.wheeler@clickhouse.com&gt;
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
@@ -3,6 +3,9 @@ on:
   push:
     branches: [main, wip/**]
   pull_request:
+permissions:
+  contents: read
+
 jobs:
   lint:
     name: 🔎 Lint Code
