Add top level read permission to CodeQL config (#314)

It already has the job-level permissions set. Close #313
spaze · May 8, 2024 · 32ac1e1 · 32ac1e1
2 parents 6a63c2b + e8161cb
commit 32ac1e1
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -20,6 +20,9 @@ on:
     - cron: '33 8 * * 6'
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})