ci: set explicit workflow permissions to read (should be a no-op) (#5318)

* We're using restricted GITHUB_TOKENS by default.
* This is expected to be a no-op operation for codeql.
This commit is contained in:
Eugene Yurtsev
2025-07-02 17:02:17 -04:00
committed by GitHub
parent 339de4c204
commit e28af0ffc3
11 changed files with 33 additions and 0 deletions
+3
View File
@@ -3,6 +3,9 @@ name: CLI integration test
on:
workflow_call:
permissions:
contents: read
jobs:
build:
runs-on: ubuntu-latest