chore: Update permissions for CI

See silverstripe/gha-ci#137 - work was done to reduce the scope of permissions required to run CI.
GuySartorelli · Aug 5, 2024 · 2cf6bfd · 2cf6bfd
1 parent c81b7ca
commit 2cf6bfd
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -5,9 +5,14 @@ on:
   pull_request:
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   ci:
     name: CI
+    permissions:
+      pull-requests: read
+      contents: read
     uses: silverstripe/gha-ci/.github/workflows/ci.yml@v1
     with:
       extra_jobs: |