Merge pull request #8 from arpitjain099/chore/restrict-workflow-token-perms

charris · web-flow · commit 5f1646d9c6bb · 2026-05-28T06:11:12.000-06:00
ci: scope cpp-linter token to read-only
diff --git a/.github/workflows/cpp-linter.yml b/.github/workflows/cpp-linter.yml
@@ -7,6 +7,9 @@ on:
     paths:
       - "npsr/*"
 
+permissions:
+  contents: read
+
 jobs:
   cpp-linter:
     runs-on: ubuntu-latest
