Merge pull request #353 from bugsnag/workflows/signing-perms

Restrict built-in github token
bugsnag · Dec 9, 2024 · f93a71d · f93a71d
2 parents 1f50e77 + 21e816d
commit f93a71d
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/signing.yml b/.github/workflows/signing.yml
@@ -1,5 +1,7 @@
 name: Sign release assets
 
+permissions: read-all
+
 on:
   release:
     types: [released]