workflow permissions

bukata-sa · bukata-sa · commit 8e9033816c12 · 2025-09-03T13:30:35.000+01:00
diff --git a/.github/workflows/v2-aggregator.yaml b/.github/workflows/v2-aggregator.yaml
@@ -12,6 +12,9 @@ defaults:
   run:
     working-directory: v2/aggregator
 
+permissions:
+  contents: read
+
 jobs:
   lint-and-test:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/v2-devenv-tidy.yaml b/.github/workflows/v2-devenv-tidy.yaml
@@ -6,6 +6,9 @@ defaults:
   run:
     working-directory: v2/build/devenv
 
+permissions:
+  contents: read
+
 jobs:
   devenv-tidy:
     runs-on: ubuntu-latest
