From 52a3bcbfee1d0d7f7154fa7985e46ead9b7536d3 Mon Sep 17 00:00:00 2001 From: Arpit Jain Date: Thu, 14 May 2026 03:31:01 +0900 Subject: [PATCH] chore: declare contents: read on ci and pre-commit workflows Signed-off-by: Arpit Jain --- .github/workflows/ci.yml | 3 +++ .github/workflows/pre-commit.yml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b2de2c03..44ae4b8d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -9,6 +9,9 @@ env: # Opt in early for Node runtime migration of JS-based actions FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true +permissions: + contents: read + jobs: build: runs-on: ubuntu-latest diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index f31db7e7..a77b6ce4 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -8,6 +8,9 @@ on: env: FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true +permissions: + contents: read + jobs: pre-commit: runs-on: ubuntu-latest