Strict permissions for gh workflows

stefannibrasil · stefannibrasil · commit 07769e927f56 · 2026-01-13T11:35:47.000-07:00
diff --git a/.github/workflows/bench.yml b/.github/workflows/bench.yml
@@ -6,6 +6,10 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   build:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/ruby.yml b/.github/workflows/ruby.yml
@@ -15,6 +15,7 @@ on:
 
 permissions:
   contents: read
+  pull-requests: read
 
 jobs:
   lint:
