From 5348c6206255bcc0cf19195623f3d9041fd7d678 Mon Sep 17 00:00:00 2001 From: Moustafa Farhat <38836727+moustafarhat@users.noreply.github.com> Date: Sun, 27 Sep 2026 22:44:16 +0200 Subject: [PATCH] Limit tests workflow token to read-only (CodeQL actions/missing-workflow-permissions) Co-Authored-By: Claude Opus 5.5 --- .github/workflows/tests.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 1dae645..1ec7f6a 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -4,6 +4,9 @@ on: push: pull_request: +permissions: + contents: read + jobs: test: strategy: