Potential fix for code scanning alert no. 12: Workflow does not contain permissions

ChronosSF · github-advanced-security[bot] · web-flow · commit f287aa0c9975 · 2026-01-27T18:00:00.000+02:00
Co-authored-by: Copilot Autofix powered by AI &lt;62310815+github-advanced-security[bot]@users.noreply.github.com&gt;
diff --git a/.github/workflows/build-app.yml b/.github/workflows/build-app.yml
@@ -2,6 +2,9 @@
 
 name: Demos CI
 
+permissions:
+  contents: read
+
 # Controls when the action will run. Triggers the workflow on push or pull request
 # events but only for the master branch
 on:
