diff options
| -rw-r--r-- | .github/workflows/test.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 568ff39..c992758 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -9,6 +9,11 @@ on: pull_request: workflow_dispatch: +# Without this, GITHUB_TOKEN inherits the repository default, which is +# read-write for anything created before February 2023. The job only reads code. +permissions: + contents: read + concurrency: group: tests-${{ github.ref }} cancel-in-progress: true |