From f42a5187fa4ce7c0d5f4e2c6deb0877ed20fe95e Mon Sep 17 00:00:00 2001 From: Muse Code Date: Thu, 17 Sep 2026 23:00:15 -0400 Subject: [PATCH] ci: declare minimal GITHUB_TOKEN permissions (contents: read) Clears the CodeQL actions/missing-workflow-permissions alert. These CI jobs only check out code and run tests, so contents: read is sufficient. --- .github/workflows/ci.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 172871e..e3b2388 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -1,5 +1,8 @@ name: CI +permissions: + contents: read + on: push: branches: [main]