Merge pull request #64 from fish-shop/openssf-scorecard-remediation

Restrict token permissions in test workflow
fish-shop · Jul 15, 2024 · ce0b6d5 · ce0b6d5
2 parents c724f03 + 8adcc8f
commit ce0b6d5
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -12,6 +12,9 @@ on:
   schedule:
     - cron: '30 19 * * *'
   workflow_dispatch:
+
+permissions: read-all
+
 jobs:
   tests:
     strategy: