From b00d9111a9c4b607ef49781b13898ada806b9ca4 Mon Sep 17 00:00:00 2001
From: Yuzu <yuzu@kirameki.cafe>
Date: Sun, 10 May 2026 14:49:59 +0700
Subject: [PATCH] =?UTF-8?q?=F0=9F=91=B7=20ci:=20Grant=20read=20permissions?=
 =?UTF-8?q?=20for=20CI/CD=20workflow?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/ci-cd.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index ded06c6..def0d48 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -6,6 +6,9 @@ on:
       - main
   pull_request:
 
+permissions:
+  contents: read
+
 env:
   REGISTRY: ghcr.io
   TURBO_TELEMETRY_DISABLED: "1"
@@ -15,6 +18,8 @@ jobs:
   test:
     name: Run tests
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout
         uses: actions/checkout@v4