add explicit default permissions (#8577)

t-will-gillis · web-flow · commit 8c74dd91b741 · 2026-03-28T14:16:17.000-07:00
diff --git a/.github/workflows/add-update-label-weekly.yml b/.github/workflows/add-update-label-weekly.yml
@@ -17,6 +17,9 @@ on:
         type: boolean
         default: true
 
+permissions:
+  contents: read
+
 jobs:
   Add-Update-Label-Weekly:
     runs-on: ubuntu-latest
