build: harden main-ci.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
2022-09-20 12:05:20 +02:00 · 2022-09-20 12:05:20 +02:00 · 9402f8c104
parent 61ecb42db9
commit 9402f8c104
1 changed files with 3 additions and 0 deletions
--- a/.github/workflows/main-ci.yml
+++ b/.github/workflows/main-ci.yml
@ -11,6 +11,9 @@ on:
  schedule:
    - cron: '0 0 * * 0'

+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
  build-php:
    # Don't trigger on schedule event when in a fork