ci: add minimum GitHub token permissions for workflow

Signed-off-by: Ashish Kurmi <akurmi@stepsecurity.io>

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 5c3e0123d6802acf8c2cb7ea54095ef6037ea652..75afd3cc9bc99bba1b3b40df43073c103ea5b44b 100644 (file)
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ master ]
 
+permissions:
+  contents: read
+
 jobs:
   build-linux:
     runs-on: ubuntu-latest