ci: use minimal permissions for Github Actions (#351)

Fixes #348 we only need to read the contents of the repo to run our tests, no other permissions are needed, as we currently do not publish via our CI jobs. Signed-off-by: Joe Richey <joerichey@google.com>
rust-random · Mar 25, 2023 · 03defac · 03defac
1 parent 8eb9c2d
commit 03defac
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -8,6 +8,9 @@ on:
   schedule:
     - cron: "0 12 * * 1"
 
+permissions:
+  contents: read
+
 env:
   CARGO_INCREMENTAL: 0
   RUSTFLAGS: "-Dwarnings"