From 734ec9a4eca477eba397fd49a4b9b88a2a8a5a2e Mon Sep 17 00:00:00 2001
From: Jack Lloyd <jack@randombit.net>
Date: Sat, 24 Apr 2021 10:00:35 -0400
Subject: Tighten GH actions scope

---
 .github/workflows/ci.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2ba3b10e9..198ed5722 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -4,6 +4,10 @@
 
 name: ci
 
+permissions:
+  contents: read
+  # implicitly all other scopes not listed become none
+
 on:
   push:
     branches: [ master ]
-- 
cgit v1.2.3