Default to read permissions

axelrindle · axelrindle · commit ca353291c192 · 2023-07-04T20:42:33.000+02:00
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -15,6 +15,8 @@ on:
   workflow_dispatch:
 # yamllint enable rule:truthy
 
+permissions: read-all
+
 jobs:
   build:
     runs-on: ubuntu-latest
