From e72dabb1b7eac37ff4ff9bdf110d755e21f5f126 Mon Sep 17 00:00:00 2001 From: Carl Zhang Date: Tue, 5 Mar 2024 02:44:00 -0500 Subject: [PATCH] ci: harden permission for freebsd.yml set it to read only Signed-off-by: Carl Zhang --- .github/workflows/freebsd.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/freebsd.yml b/.github/workflows/freebsd.yml index 493970d..a126c67 100644 --- a/.github/workflows/freebsd.yml +++ b/.github/workflows/freebsd.yml @@ -10,6 +10,8 @@ on: - '.github/workflows/**' - '!.github/workflows/freebsd.yml' +permissions: read + jobs: freebsd: runs-on: ubuntu-latest