ci: default workflow tokens to read-only contents (#1218)
This commit is contained in:
parent
103bf239b3
commit
3501f3e646
1 changed files with 15 additions and 0 deletions
3
.github/workflows/codeql.yml
vendored
3
.github/workflows/codeql.yml
vendored
|
|
@ -8,6 +8,9 @@ on:
|
|||
schedule:
|
||||
- cron: '0 0 * * 1' # Weekly on Monday
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
analyze:
|
||||
name: Analyze
|
||||
|
|
|
|||
Loading…
Reference in a new issue