ci: declare minimal GITHUB_TOKEN permissions (contents: read)

Clears the CodeQL actions/missing-workflow-permissions alert. These CI jobs only check out code and run tests, so contents: read is sufficient.
2026-09-17 23:12:58 -04:00
parent a2fba9d9e0
commit d793cf2797
1 changed files with 3 additions and 0 deletions
@@ -1,5 +1,8 @@
 name: CI

+permissions:
+  contents: read
+
 on:
  push:
    branches: [main]