ci: read only permission on commitlint

aaa2000 · soyuka · commit 4492bcdbfa7f · 2026-03-02T09:33:58.000+01:00
diff --git a/.github/workflows/commitlint.yml b/.github/workflows/commitlint.yml
@@ -4,6 +4,9 @@ on:
   pull_request_target:
     types: [opened, reopened, synchronize]
 
+permissions:
+  contents: read
+
 jobs:
   commitlint:
     if: github.event_name == 'pull_request_target'
