chore(ci): reduce workflow permissions

paolobarbolini · paolobarbolini · commit 24cf04e40140 · 2025-07-01T09:03:59.000+02:00
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -6,6 +6,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   rustfmt:
     name: rustfmt / stable
diff --git a/.github/workflows/deny.yml b/.github/workflows/deny.yml
@@ -10,6 +10,9 @@ on:
       - '**/Cargo.lock'
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   audit:
     runs-on: ubuntu-latest
