CI: Limit permission of actions to readonly

duanyangjing · luchsh · commit f47b3f8dcb81 · 2025-08-07T14:43:08.000+08:00
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -27,6 +27,10 @@
 
 name: 'CVM build and test'
 
+permissions:
+  contents: read
+  pull-requests: write
+
 on:
   pull_request:
     branches:
