From 75eadf5fdd52f138b5b2b03cd13bb2c79234945d Mon Sep 17 00:00:00 2001
From: Tushar Mathur <tusharmath@gmail.com>
Date: Wed, 27 Nov 2024 20:12:49 -0800
Subject: [PATCH] chore: update permissions

---
 .github/workflows/ci.yml | 2 ++
 tests/ci.rs              | 1 +
 2 files changed, 3 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 03bf7b1..2e7943d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -33,6 +33,8 @@ jobs:
   build:
     name: Build and Test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
     - name: Checkout Code
       uses: actions/checkout@v4
diff --git a/tests/ci.rs b/tests/ci.rs
index 4835d54..1b9e702 100644
--- a/tests/ci.rs
+++ b/tests/ci.rs
@@ -7,6 +7,7 @@ fn generate() {
     let flags = RustFlags::deny("warnings");
 
     let build = Job::new("Build and Test")
+        .permissions(Permissions::default().contents(Level::Read))
         .add_step(Step::checkout())
         .add_step(
             Toolchain::default()