ci: declare contents: read on PR description-check and precommit workflows (#5657)

arpitjain099 · web-flow · commit 4270bc2bdfe1 · 2026-07-13T06:06:41.000Z
diff --git a/.github/workflows/pr-description-check.yml b/.github/workflows/pr-description-check.yml
@@ -19,6 +19,10 @@ on:
     - opened
     - edited
     - synchronize
+
+permissions:
+  contents: read
+
 jobs:
   check-description:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/pr-precommit.yml b/.github/workflows/pr-precommit.yml
@@ -28,6 +28,9 @@ on:
     - release-candidate
     - hotfix-*
 
+permissions:
+  contents: read
+
 jobs:
   pre-commit:
     runs-on: ubuntu-latest
