Define contents permissions on "dependabot validate" workflow

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
jaegertracing · Aug 22, 2024 · 21e4d09 · 21e4d09
1 parent 49114db
commit 21e4d09
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/ci-lint-dependabot-config.yml b/.github/workflows/ci-lint-dependabot-config.yml
@@ -5,6 +5,11 @@ on:
     paths:
       - '.github/dependabot.yml'
       - '.github/workflows/validate-dependabot-config.yml'
+
+# See https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
+permissions:
+  contents: read
+
 jobs:
   validate:
     runs-on: ubuntu-latest