Set least privileged token permission for GitHub Actions (#3155)

Signed-off-by: Ashish Kurmi <akurmi@stepsecurity.io>
2022-10-31 00:46:46 -07:00
parent e5af37bc8c
commit da51adc276
3 changed files with 12 additions and 0 deletions
@@ -3,6 +3,9 @@ name: goreleaser
 on:
  workflow_dispatch:

+permissions:
+  contents: read
+
 jobs:
  goreleaser:
    runs-on: ubuntu-latest