Add least-privilege permissions to CI workflow

honnibal · honnibal · commit 0e688d442463 · 2026-03-27T08:49:51.000+01:00
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -9,7 +9,8 @@ on:
     paths-ignore:
       - "*.md"
 
-permissions: {}
+permissions:
+  contents: read
 
 env:
   MODULE_NAME: "weasel"
