add job level permission

kevinjqliu · kevinjqliu · commit 6034ce71cd0d · 2026-02-22T17:28:59.000-08:00
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -35,6 +35,7 @@ jobs:
     name: Analyze Actions
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       security-events: write
       packages: read
 
