declare default permissions as read only

Signed-off-by: Navin Chandra <[email protected]>
kubearmor · Oct 18, 2024 · 524000e · 524000e
1 parent 1b8ab71
commit 524000e
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/.github/workflows/ci-merge-coverage.yaml b/.github/workflows/ci-merge-coverage.yaml
@@ -6,6 +6,9 @@ on:
     types:
       - completed
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   merge-coverage-files:
     name: Download and merge files
@@ -74,4 +77,4 @@ jobs:
 
       - uses: codecov/codecov-action@v4
         with:
-          token: ${{ secrets.CODECOV_TOKEN }}
+          token: ${{ secrets.CODECOV_TOKEN }}