Merge pull request #3235 from arpitjain099/chore/declare-workflow-perms

thaJeztah · web-flow · commit 6588003ab6ee · 2026-06-08T11:05:02.000+02:00
ci: declare workflow-level `contents: read` on ci and validate
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -11,6 +11,9 @@ env:
   DOCKER_SWARMKIT_USE_CONTAINER: 1
   IMAGE_NAME: moby/swarmkit
 
+permissions:
+  contents: read
+
 jobs:
   build-dev:
     runs-on: ubuntu-22.04
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
@@ -15,6 +15,9 @@ on:
 env:
   DOCKER_SWARMKIT_USE_CONTAINER: 1
 
+permissions:
+  contents: read
+
 jobs:
   validate:
     runs-on: ubuntu-22.04
