Build: Set minimum permission for GitHub Actions Token

Closes gh-2129 Signed-off-by: Ashish Kurmi <akurmi@stepsecurity.io>
jquery · Dec 1, 2022 · 970a0cf · 970a0cf
1 parent 62f2ccc
commit 970a0cf
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -2,6 +2,9 @@ name: Grunt tests
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   grunt:
     name: Grunt based tests with Node.js ${{ matrix.node-version }}