Update permissions in GitHub Actions workflow to restrict contents access to read

devnomadic · devnomadic · commit 0f78590e09e6 · 2025-06-10T19:54:56.000+10:00
diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
@@ -9,7 +9,9 @@ on:
       - closed
 
 permissions:
-  contents: write
+  contents: read
+  pages: write
+  id-token: write
 
 concurrency:
   group: "pr-preview"
