build: harden ccpp.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
2022-09-19 23:31:58 +02:00 · 2022-09-19 23:31:58 +02:00 · f39606589e
parent a165dbc6ff
commit f39606589e
1 changed files with 3 additions and 0 deletions
--- a/.github/workflows/ccpp.yml
+++ b/.github/workflows/ccpp.yml
@ -6,6 +6,9 @@ on:
  pull_request:
    branches: [ master ]

+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
  job:
    name: ${{ matrix.name }}-build-and-test