From 2ecec8cc449eb1b230ad066c7b94309d50d89b4b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Johanna=20S=C3=B6rng=C3=A5rd?=
 <44257381+JSorngard@users.noreply.github.com>
Date: Fri, 3 Apr 2026 18:30:33 +0200
Subject: [PATCH] Add permissions for contents read in scheduled workflows

---
 .github/workflows/scheduled.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/scheduled.yml b/.github/workflows/scheduled.yml
index 288137da..0b3a1176 100644
--- a/.github/workflows/scheduled.yml
+++ b/.github/workflows/scheduled.yml
@@ -19,6 +19,8 @@ jobs:
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
     name: nightly
     steps:
       - uses: actions/checkout@v6
@@ -44,6 +46,8 @@ jobs:
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
     name: beta / updated
     # There's no point running this if no Cargo.lock was checked in in the first place, since we'd
     # just redo what happened in the regular test job. Unfortunately, hashFiles only works in if on