ci: limit workflow permission

FlysonBot · FlysonBot · commit f19e8fe31441 · 2024-11-29T06:18:33.000Z
diff --git a/.github/workflows/deploy_sphinx.yaml b/.github/workflows/deploy_sphinx.yaml
@@ -4,11 +4,14 @@ on:
   workflow_dispatch:
 
 permissions:
-  contents: write
+  contents: read
 
 jobs:
   build:
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
     
     steps:
       - name: Checkout code
