Merge pull request #2395 from ricardoapl/fix-github-token-permissions

k8s-ci-robot · web-flow · commit 89f0db6dd2fd · 2024-06-14T03:13:26.000-07:00
ci: least privileged GITHUB_TOKEN permissions
diff --git a/.github/workflows/openvex.yml b/.github/workflows/openvex.yml
@@ -4,6 +4,10 @@ on:
   workflow_dispatch:
   release:
     types: [published]
+
+permissions:
+  contents: read
+
 jobs:
   vexctl:
     runs-on: ubuntu-latest
