fix(ci): add top-level read-all permissions to pre-commit-autoupdate workflow

markuslf · markuslf · commit 8776554dc097 · 2026-04-07T14:52:37.000+02:00
diff --git a/.github/workflows/pre-commit-autoupdate.yml b/.github/workflows/pre-commit-autoupdate.yml
@@ -5,6 +5,8 @@ on:
     - cron: '0 8 * * 1'
   workflow_dispatch: {}
 
+permissions: read-all
+
 jobs:
   update:
     runs-on: 'ubuntu-latest'
