Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions'

syed-reza98 · github-advanced-security[bot] · web-flow · commit 0a3d19c0c52a · 2026-05-05T13:33:05.000+06:00
Co-authored-by: Copilot Autofix powered by AI &lt;62310815+github-advanced-security[bot]@users.noreply.github.com&gt;
diff --git a/.github/workflows/test-and-build.yml b/.github/workflows/test-and-build.yml
@@ -11,6 +11,10 @@ on:
       - main
       - develop
 
+permissions:
+  contents: read
+  actions: read
+
 jobs:
   # Job 1: Analyze code and run tests
   test:
