ci: scope down permissions for ci-canary.yaml

AdnaneKhan · mselim00 · commit a3232505c0ed · 2025-12-12T11:54:12.000-08:00
diff --git a/.github/workflows/ci-canary.yaml b/.github/workflows/ci-canary.yaml
@@ -4,6 +4,9 @@ on:
     # twice daily at 8pm and 8am PST
     - cron: "0 3,15 * * *"
 
+permissions:
+  contents: read
+
 jobs:
   setup:
     # Don't run if this is on a fork
