Set permissions in GitHub workflows

chrisn · chrisn · commit d75973a6605c · 2025-04-30T09:05:42.000+01:00
diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml
@@ -12,6 +12,10 @@ on:
     branches: [ master ]
 
 jobs:
+  permissions:
+    contents: read
+    pull-requests: read
+
   build:
     runs-on: ubuntu-latest
 
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
@@ -9,6 +9,10 @@ on:
     types: [created]
 
 jobs:
+  permissions:
+    contents: read
+    pull-requests: read
+
   build:
     runs-on: ubuntu-latest
 
