Merge pull request #4 from github-samples/alert-autofix-2

chrisreddington · web-flow · commit 7b877fe553d5 · 2025-07-30T11:22:05.000+01:00
Potential fix for code scanning alert no. 2: Workflow does not contain permissions
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [main]
 
+permissions:
+  contents: read
+
 jobs:
   ci:
     runs-on: ubuntu-latest
