Merge pull request #96 from step-security-bot/stepsecurity_remediatio…

…n_1716764963 [StepSecurity] ci: Harden GitHub Actions
Nick2bad4u · May 26, 2024 · 751606e · 751606e
2 parents 7250513 + f11c888
commit 751606e
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/bandit.yml b/.github/workflows/bandit.yml
@@ -20,6 +20,9 @@ on:
   schedule:
     - cron: '27 9 * * 0'
 
+permissions:
+  contents: read
+
 jobs:
   bandit:
     permissions: