Merge pull request #80 from github/campaign-fix-4-3

misfir3 · web-flow · commit 6b1246a6534a · 2025-11-06T10:58:30.000-07:00
Potential fixes for 2 code scanning alerts
diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
@@ -8,6 +8,8 @@ on:
 
 jobs:
   build:
+    permissions:
+      contents: read
     runs-on: ubuntu-22.04
 
     steps:
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -1,4 +1,7 @@
 name: Publish
+permissions:
+  contents: read
+  packages: write
 
 on:
   release:
