ci: add explicit contents:read permission to download_release_assets job

devin-ai-integration[bot] · aaronsteers · devin-ai-integration[bot] · commit a05fd9aa42a3 · 2026-01-18T23:24:13.000Z
Co-Authored-By: AJ Steers &lt;aj@airbyte.io&gt;
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -33,6 +33,8 @@ jobs:
     name: Download Release Assets
     runs-on: ubuntu-latest
     if: github.event_name == 'release'
+    permissions:
+      contents: read
     steps:
       - name: Download wheel and sdist from release
         env:
