ci: use minimal permissions for Github Actions

Fixes #348 we only need to read the contents of the repo to run our tests, no other permissions are needed, as we currently do not publish via our CI jobs. Signed-off-by: Joe Richey <joerichey@google.com>
rust-random · Mar 24, 2023 · 0b9c0b8 · 0b9c0b8
1 parent 8eb9c2d
commit 0b9c0b8
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -8,6 +8,9 @@ on:
   schedule:
     - cron: "0 12 * * 1"
 
+permissions:
+  contents: read
+
 env:
   CARGO_INCREMENTAL: 0
   RUSTFLAGS: "-Dwarnings"