build: harden test.yml permissions (#1274)

Signed-off-by: Alex <aleksandrosansan@gmail.com> Signed-off-by: Alex <aleksandrosansan@gmail.com>
rust-random · Dec 9, 2022 · 81d7dc7 · 81d7dc7
1 parent 0dddc2c
commit 81d7dc7
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ master, '0.[0-9]+' ]
 
+permissions:
+  contents: read #  to fetch code (actions/checkout)
+
 jobs:
   check-doc:
     name: Check doc