diff options
| -rw-r--r-- | .github/workflows/test.yml | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 568ff39..283daec 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -9,6 +9,11 @@ on: pull_request: workflow_dispatch: +# Without this, GITHUB_TOKEN inherits the repository default, which is +# read-write for anything created before February 2023. The job only reads code. +permissions: + contents: read + concurrency: group: tests-${{ github.ref }} cancel-in-progress: true @@ -20,7 +25,7 @@ jobs: runs-on: macos-26 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Show toolchain run: | |