[StepSecurity] ci: Harden GitHub Actions

step-security-bot · step-security-bot · commit afef18e73152 · 2025-04-07T18:23:52.000Z
Signed-off-by: StepSecurity Bot &lt;bot@stepsecurity.io&gt;
diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
@@ -13,6 +13,9 @@ on:
     branches:
       - main
 name: benchmark pull requests
+permissions:
+  contents: read
+
 jobs:
   runBenchmark:
     name: run benchmark
diff --git a/.github/workflows/markdown-link-check.yml b/.github/workflows/markdown-link-check.yml
@@ -8,6 +8,9 @@ on:
     paths:
       - '**/*.md'
 
+permissions:
+  contents: read
+
 jobs:
   markdown-link-check:
     runs-on: ubuntu-latest
