From d793cf2797605e9e534ca8dff034f5bcaa14895d Mon Sep 17 00:00:00 2001 From: Archerkattri Date: Thu, 17 Sep 2026 23:00:15 -0400 Subject: [PATCH] ci: declare minimal GITHUB_TOKEN permissions (contents: read) Clears the CodeQL actions/missing-workflow-permissions alert. These CI jobs only check out code and run tests, so contents: read is sufficient. --- .github/workflows/ci.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 172871e..e3b2388 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -1,5 +1,8 @@ name: CI +permissions: + contents: read + on: push: branches: [main]