chore: limit workflow token permissions

afc163 · afc163 · commit afd83c5c0666 · 2026-06-26T14:11:16.000+08:00
diff --git a/.github/workflows/react-component-ci.yml b/.github/workflows/react-component-ci.yml
@@ -1,5 +1,7 @@
 name: ✅ test
 on: [push, pull_request]
+permissions:
+  contents: read
 jobs:
   test:
     uses: react-component/rc-test/.github/workflows/test-utoo.yml@main
