ci(host-checks): add explicit permissions to fix CodeQL alert

danbugs · danbugs · commit a9f096cc0bf9 · 2026-05-12T22:48:54.000Z
Signed-off-by: danbugs &lt;danilochiarlone@gmail.com&gt;
diff --git a/.github/workflows/host-checks.yml b/.github/workflows/host-checks.yml
@@ -28,6 +28,8 @@ concurrency:
 jobs:
   checks:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     timeout-minutes: 25
     defaults:
       run:
