ci: explicitly set permissions (#37)

imjasonh · web-flow · commit 67a753db49c7 · 2025-12-06T09:02:06.000+01:00
Signed-off-by: Jason Hall &lt;jason@chainguard.dev&gt;
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
@@ -23,6 +23,9 @@ jobs:
           - windows-latest
     runs-on: ${{ matrix.os }}
 
+    permissions:
+      contents: read
+
     steps:
       - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
