Scope down CI permissions

sirknightj · web-flow · commit 1c8c3f8c1cc1 · 2026-03-05T19:07:52.000-08:00
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -13,6 +13,8 @@ on:
 jobs:
   nodejs-ubuntu-build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     strategy:
       matrix:
         node: [ 18, 19, 20, 21, 22, 23 ]
