more restrictive top level permissions

jksolbakken · Jul 10, 2024 · 8ba358c · 8ba358c
1 parent 64aad9c
commit 8ba358c
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml
@@ -1,5 +1,7 @@
 name: Dependabot auto-merge
 on: pull_request
+permissions:
+  contents: read
 
 jobs:
   dependabot: