Potential fix for code scanning alert no. 4: Workflow does not contain permissions

maxammann · github-advanced-security[bot] · web-flow · commit 8ea194c6b594 · 2025-06-17T13:58:54.000+02:00
Co-authored-by: Copilot Autofix powered by AI &lt;62310815+github-advanced-security[bot]@users.noreply.github.com&gt;
diff --git a/.github/workflows/gha-secret-extract.yaml b/.github/workflows/gha-secret-extract.yaml
@@ -1,6 +1,9 @@
 # .github/workflows/upload-gh-secrets.yml
 name: Upload GH Secrets to 1Password
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
 
