fix(ci): permissions (#591)

igas · web-flow · commit d78c8f1abf68 · 2025-01-31T20:39:36.000+11:00
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -7,6 +7,9 @@ on:
 jobs:
   credo:
     runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+      security-events: write
     steps:
       - uses: actions/checkout@v4.2.2
       - uses: actions/cache@v4.2.0
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -13,7 +13,8 @@ jobs:
   test:
     uses: ./.github/workflows/ci.yaml
     permissions:
-      contents: write
+      contents: read
+      security-events: write
 
   release:
     needs: test
