Add explicit token permissions for base release workflow (#1139)

mowies · web-flow · commit 6d46fb8540ea · 2025-08-21T13:21:50.000Z
diff --git a/.github/workflows/base-release.yaml b/.github/workflows/base-release.yaml
@@ -21,6 +21,9 @@ on:
         type: string
         default: false
 
+permissions:
+  contents: read
+
 env:
   # renovate: datasource=github-releases depName=goreleaser/goreleaser-pro
   GORELEASER_PRO_VERSION: v2.11.2
