Merge pull request #46 from sandialabs/security-issues

Restrict CI permissions to read
sandialabs · Jul 4, 2024 · 95f1599 · 95f1599
2 parents c341421 + 627a50f
commit 95f1599
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
@@ -11,6 +11,9 @@ defaults:
  run:
  shell: bash
 
+permissions:
+ contents: read
+
 jobs:
  test:
  runs-on: ubuntu-latest
@@ -52,6 +55,7 @@ jobs:
  env:
  CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
+
  - name: Check documentation spelling
  run: make spelling
  working-directory: ./doc