build: add explicit permissions to GitHub Actions workflows

This restricts the GITHUB_TOKEN to least-privilege in all workflows, fixing CodeQL code-scanning alerts for actions/missing-workflow-permissions.
2026-04-09 14:37:30 +01:00
parent bfd650b428
commit a2ce8b04f3
5 changed files with 16 additions and 0 deletions
@@ -4,6 +4,9 @@ on:
  issues:
      types: [labeled]

+permissions:
+  contents: read
+
 jobs:
  notify:
    runs-on: ubuntu-latest