From 2a466e6347de66ca010d1177ef3dc738303d8767 Mon Sep 17 00:00:00 2001
From: "U. Artie Eoff" <ullysses.a.eoff@intel.com>
Date: Tue, 3 Sep 2024 20:24:27 -0400
Subject: [PATCH] gh/workflows: set top-level permissions

Signed-off-by: U. Artie Eoff <ullysses.a.eoff@intel.com>
---
 .github/workflows/unit.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/unit.yml b/.github/workflows/unit.yml
index 01c9bcc5..c6be1b0c 100644
--- a/.github/workflows/unit.yml
+++ b/.github/workflows/unit.yml
@@ -2,6 +2,9 @@ name: unit
 
 on: [ push, pull_request ]
 
+permissions:
+  contents: read
+
 jobs:
   test:
     strategy: