build: harden dependency-graph.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
little-inferno · Jan 25, 2023 · 8fcaaa3 · 8fcaaa3
1 parent 2701282
commit 8fcaaa3
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/dependency-graph.yml b/.github/workflows/dependency-graph.yml
@@ -3,6 +3,8 @@ on:
   push:
     branches:
       - main # default branch of the project
+permissions:
+  contents: read # to fetch code (actions/checkout)
 jobs:
   dependency-graph:
     name: Update Dependency Graph