Merge pull request #119 from protocolbuffers/dibenede-patch-2

dibenede · web-flow · commit ff3b3439f095 · 2022-07-21T18:30:47.000-07:00
set top level permissions to read
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -11,6 +11,8 @@
 #
 name: "CodeQL"
 
+permissions: read-all
+
 on:
   push:
     branches: [ "main" ]
