Merge pull request #370 from sashashura/patch-1

alexander-akait · web-flow · commit 6a9e1facc875 · 2023-05-24T20:15:59.000+03:00
GitHub Workflows security hardening
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [main]
 
+permissions:
+  contents: read #  to fetch code (actions/checkout)
+
 jobs:
   lint:
     runs-on: ubuntu-latest
