From 2c0e1840fab58fec248027d9fd2b3a0b9be20883 Mon Sep 17 00:00:00 2001
From: klemenfn <klemen@flare.network>
Date: Tue, 24 Feb 2026 13:10:28 +0100
Subject: [PATCH] add default token permissions

---
 .github/workflows/release-bitcoind.yml  | 3 +++
 .github/workflows/release-dogecoind.yml | 3 +++
 .github/workflows/release-rippled.yml   | 3 +++
 3 files changed, 9 insertions(+)

diff --git a/.github/workflows/release-bitcoind.yml b/.github/workflows/release-bitcoind.yml
index 7a212a9..23890d7 100644
--- a/.github/workflows/release-bitcoind.yml
+++ b/.github/workflows/release-bitcoind.yml
@@ -7,6 +7,9 @@ on:
     branches: [main]
     paths: ["images/bitcoind/**"]
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   call:
     uses: ./.github/workflows/release-image.yml
diff --git a/.github/workflows/release-dogecoind.yml b/.github/workflows/release-dogecoind.yml
index b2a6474..944f515 100644
--- a/.github/workflows/release-dogecoind.yml
+++ b/.github/workflows/release-dogecoind.yml
@@ -7,6 +7,9 @@ on:
     branches: [main]
     paths: ["images/dogecoind/**"]
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   call:
     uses: ./.github/workflows/release-image.yml
diff --git a/.github/workflows/release-rippled.yml b/.github/workflows/release-rippled.yml
index 80f3638..2d22b4f 100644
--- a/.github/workflows/release-rippled.yml
+++ b/.github/workflows/release-rippled.yml
@@ -7,6 +7,9 @@ on:
     branches: [main]
     paths: ["images/rippled/**"]
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   call:
     uses: ./.github/workflows/release-image.yml