Harden these permissions.

johnbillion · Dec 21, 2024 · fbad1a0 · fbad1a0
1 parent 6b386af
commit fbad1a0
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
@@ -12,9 +12,13 @@ on:
       - '**'
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   test:
     name: WP ${{ matrix.wp }}
+    permissions:
+      contents: read
     uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-integration-tests.yml@trunk
     strategy:
       matrix: