ci: scope down permissions for pr-ci.yaml

AdnaneKhan · AdnaneKhan · commit 1ea09d9287f6 · 2025-10-21T17:53:34.000-04:00
diff --git a/.github/workflows/pr-ci.yaml b/.github/workflows/pr-ci.yaml
@@ -4,6 +4,9 @@ name: CloudFormation CLI Pull Request CI
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     env:
