ci: limit reusable workflow secrets

afc163 · afc163 · commit 5b3778d80d72 · 2026-06-28T21:19:27.000+08:00
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -2,7 +2,10 @@ name: CI
 
 on: ['push', 'pull_request']
 
+permissions:
+  contents: read
 jobs:
   CI:
     uses: react-component/rc-test/.github/workflows/test-utoo.yml@main
-    secrets: inherit
+    secrets:
+      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
