fix: add permissions block to run-duckdb-tests job (CodeQL)

b-per · b-per · commit b72121b9c5d5 · 2026-04-09T20:40:42.000+02:00
diff --git a/.github/workflows/fusion.yml b/.github/workflows/fusion.yml
@@ -28,6 +28,8 @@ env:
 jobs:
     run-duckdb-tests:
         runs-on: ubuntu-latest
+        permissions:
+            contents: read
 
         steps:
             - name: "Checkout PR code"
