Add read-only top-level permissions to cifuzz.yml

Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com>
2 years ago · 26c719e8cd
parent 96ed20725c
commit 26c719e8cd
1 changed files with 4 additions and 0 deletions
--- a/.github/workflows/cifuzz.yml
+++ b/.github/workflows/cifuzz.yml
@ -1,5 +1,9 @@
 name: CIFuzz
 on: [pull_request]
+
+permissions:
+  contents: read
+
 jobs:
  Fuzzing:
    runs-on: ubuntu-latest