Scope down GitHub token permissions for ci_static-analysis.yaml

AdnaneKhan · AdnaneKhan · commit 6e4796acb68a · 2025-10-20T21:37:16.000-04:00
diff --git a/.github/workflows/ci_static-analysis.yaml b/.github/workflows/ci_static-analysis.yaml
@@ -3,6 +3,10 @@ name: static analysis
 
 on: ["pull_request", "push"]
 
+
+permissions:
+  contents: read
+
 jobs:
   not-grep:
     runs-on: ubuntu-latest
