build: harden echo.yml permissions

Signed-off-by: Alex <[email protected]>
labstack · Dec 8, 2022 · 40eb889 · 40eb889
1 parent 135c511
commit 40eb889
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/echo.yml b/.github/workflows/echo.yml
@@ -21,6 +21,9 @@ on:
       - 'codecov.yml'
   workflow_dispatch:
 
+permissions:
+  contents: read #  to fetch code (actions/checkout)
+
 jobs:
   test:
     strategy: