ci: update top level permissions to make scorecard happy (#583)

open-amt-cloud-toolkit · Jul 8, 2024 · b948ca5 · b948ca5
1 parent 18b01ba
commit b948ca5
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/semantic.yml b/.github/workflows/semantic.yml
@@ -2,7 +2,9 @@ name: "Semantic Pull Request"
 
 on:
   pull_request:
-    types: ['opened', 'edited', 'reopened', 'synchronize']
+    types: ["opened", "edited", "reopened", "synchronize"]
+permissions:
+  contents: read
 jobs:
   main:
     name: Validate PR and Commits