workflow permissions

bukata-sa · bukata-sa · commit 6629221ef9d1 · 2025-09-03T13:28:57.000+01:00
diff --git a/.github/workflows/v2-aggregator.yaml b/.github/workflows/v2-aggregator.yaml
@@ -12,6 +12,9 @@ defaults:
   run:
     working-directory: v2/aggregator
 
+permissions:
+  contents: read
+
 jobs:
   lint-and-test:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/v2-devenv-tidy.yaml b/.github/workflows/v2-devenv-tidy.yaml
@@ -6,6 +6,9 @@ defaults:
   run:
     working-directory: v2/build/devenv
 
+permissions:
+  contents: read
+
 jobs:
   devenv-tidy:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/v2-e2e-evm-testnet.yaml b/.github/workflows/v2-e2e-evm-testnet.yaml
@@ -11,6 +11,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}-${{ github.sha }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   e2e:
     permissions:
diff --git a/.github/workflows/v2-e2e.yaml b/.github/workflows/v2-e2e.yaml
@@ -11,6 +11,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}-${{ github.sha }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   e2e:
     permissions:
diff --git a/.github/workflows/v2-services.yaml b/.github/workflows/v2-services.yaml
@@ -11,6 +11,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}-${{ github.sha }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   e2e:
     permissions:
