Merge pull request #7 from TeaEntityLab/alert-autofix-4

johnteee · web-flow · commit 4ad0d26d077d · 2026-05-14T18:44:35.000+08:00
Potential fix for code scanning alert no. 4: Workflow does not contain permissions
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [main]
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest
