Restrict permissions for the GITHUB_TOKEN in .github/workflows/ci-unit-tests.yaml

step-security-bot · josephvusich · commit 7d714051dac8 · 2021-10-13T10:04:34.000-07:00
diff --git a/.github/workflows/ci-unit-tests.yaml b/.github/workflows/ci-unit-tests.yaml
@@ -4,6 +4,8 @@ on: [pull_request, push]
 
 jobs:
   ci-unit-tests:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
