ci: scope down permissions for semgrep-analysis.yml

AdnaneKhan · AdnaneKhan · commit 4b738f4f002a · 2025-10-21T17:34:54.000-04:00
diff --git a/.github/workflows/semgrep-analysis.yml b/.github/workflows/semgrep-analysis.yml
@@ -10,6 +10,9 @@ on:
   schedule:
     - cron: '23 20 * * 1'
 
+permissions:
+  contents: read
+
 jobs:
   semgrep:
     name: Scan
