Merge pull request #787 from jpculp/restrict-actions

jpculp · web-flow · commit 874e4ea55686 · 2025-10-08T18:01:05.000-07:00
limit permissions of GITHUB_TOKEN in CI workflow
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -18,6 +18,9 @@ on:
       - 'design/**'
     branches: [develop]
 
+permissions:
+  contents: read
+
 jobs:
 
   build-binary:
