ci: harden permission for freebsd.yml

set it to read only Signed-off-by: Carl Zhang <[email protected]>
intel · Mar 5, 2024 · ff5630b · ff5630b
1 parent f484f4f
commit ff5630b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/freebsd.yml b/.github/workflows/freebsd.yml
@@ -10,6 +10,8 @@ on:
     - '.github/workflows/**'
     - '!.github/workflows/freebsd.yml'
 
+permissions: read
+
 jobs:
   freebsd:
     runs-on: ubuntu-latest