build: harden create-packages.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
2022-09-20 13:35:41 +02:00 · 2022-09-20 13:35:41 +02:00 · 6b0985a690
parent 8514658262
commit 6b0985a690
1 changed files with 3 additions and 0 deletions
--- a/.github/workflows/create-packages.yml
+++ b/.github/workflows/create-packages.yml
@ -4,6 +4,9 @@ on:
  push:
    branches: [ master ]

+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
  package:
    strategy: