[StepSecurity] ci: Harden GitHub Actions

step-security-bot · step-security-bot · commit ddff1974f9b6 · 2024-03-23T09:25:10.000Z
Signed-off-by: StepSecurity Bot &lt;bot@stepsecurity.io&gt;
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -23,6 +23,9 @@ on:
   pull_request:
     branches: [ "main" ]
 
+permissions:
+  contents: read
+
 jobs:
 
   build:
