Restrict workflow permissions

marcransome · Jan 9, 2025 · cd563d7 · cd563d7
1 parent f5d215a
commit cd563d7
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -3,6 +3,9 @@ on:
   pull_request:
     branches:
       - main
+
+permissions: read-all
+
 jobs:
   dependency-review:
     runs-on: ubuntu-latest