chore: restrict GitHub workflow permissions (swiftlang#504)

incertum · web-flow · commit c97aa75f653d · 2025-10-17T17:22:46.000Z
Signed-off-by: Melissa Kilby &lt;mkilby@apple.com&gt;
diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml
@@ -1,4 +1,8 @@
 name: Build Docker images
+
+permissions:
+  contents: read
+
 on: [pull_request]
 
 env:
