Add least-privilege permissions to workflows

honnibal · honnibal · commit 72129b83ead7 · 2026-03-27T08:50:59.000+01:00
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -9,6 +9,9 @@ on:
     paths-ignore:
       - "*.md"
 
+permissions:
+  contents: read
+
 env:
   MODULE_NAME: 'sense2vec'
   RUN_MYPY: 'false'
