From 35280686eae3fae52d16140dc5e1894fd2841203 Mon Sep 17 00:00:00 2001
From: Malcolm Nixon <Malcolm.nixon@gmail.com>
Date: Wed, 24 Dec 2025 21:15:51 -0500
Subject: [PATCH] Potential fix for code scanning alert no. 5: Workflow does
 not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
---
 .github/workflows/build_on_push.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/build_on_push.yaml b/.github/workflows/build_on_push.yaml
index 38b9a59..f1ff874 100644
--- a/.github/workflows/build_on_push.yaml
+++ b/.github/workflows/build_on_push.yaml
@@ -26,6 +26,8 @@ jobs:
   build:
     name: Build Artifacts
     needs: quality-checks
+    permissions:
+      contents: read
     uses: ./.github/workflows/build.yaml
     with:
       semver: '0.0.0-run.${{ github.run_number }}'