From c16e630c11dff806c6aea3d0b93442d59c8b61b1 Mon Sep 17 00:00:00 2001
From: jianjunz <jianjun.zhu@intel.com>
Date: Tue, 9 Jul 2024 15:30:49 +0800
Subject: [PATCH] Run GitHub workflow with read permission. (#751)

---
 .github/workflows/ci.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 914efbcac..0c787620a 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -1,4 +1,5 @@
 name: Continuous Integration
+permissions: read-all
 
 on:
   push:
@@ -36,4 +37,4 @@ jobs:
             docker rm $(docker ps -q --filter ancestor=native-sdk-ubuntu)
           fi
           rm container_id.out
-          rm git_sha.out
\ No newline at end of file
+          rm git_sha.out