Harden CI workflow token scope with explicit default permissions (#2)

* Initial plan

* fix: add least-privilege workflow token permissions

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
This commit is contained in:
Copilot
2026-07-27 14:52:19 +07:00
committed by GitHub
co-authored by copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
parent 65df8b7c8f
commit c91d9c0884
+3
View File
@@ -6,6 +6,9 @@ on:
tags: ["*.*.*"]
pull_request:
permissions:
contents: read
jobs:
test:
runs-on: ubuntu-latest