From 70796accc507ff7ac1b70d882f1c74e6822a8994 Mon Sep 17 00:00:00 2001
From: James Maes <james@kof22.com>
Date: Fri, 16 Oct 2026 16:13:42 -0500
Subject: [PATCH] ci: default GITHUB_TOKEN to contents: read

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/workflows/build.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 3279a98..219c7aa 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -7,6 +7,9 @@ on:
   pull_request:
     branches: [main, develop]
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest