From 50ccec2498e6f130a8a541b3f7fecc98b3c13739 Mon Sep 17 00:00:00 2001
From: penev92 <penev92@gmail.com>
Date: Wed, 5 Apr 2023 13:26:50 +0300
Subject: [PATCH] Added explicit GitHub workflows permissions

From OpenRA PR 20435.
---
 .github/workflows/ci.yml        | 3 +++
 .github/workflows/packaging.yml | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4410ec45d..36b86eea5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -4,6 +4,9 @@ on:
   push:
   pull_request:
 
+permissions:
+  contents: read  #  to fetch code (actions/checkout)
+
 jobs:
   linux:
     name: Linux (.NET 6.0)
diff --git a/.github/workflows/packaging.yml b/.github/workflows/packaging.yml
index 7b4711cbd..7a32f93b6 100644
--- a/.github/workflows/packaging.yml
+++ b/.github/workflows/packaging.yml
@@ -5,6 +5,9 @@ on:
     tags:
     - '*'
 
+permissions:
+  contents: write  #  for release creation (svenstaro/upload-release-action)
+
 jobs:
   linux:
     name: Linux AppImages