Add explicit token permissions for base-ci-goreleaser workflow (#1132)

trask · web-flow · commit d12de9a4ad11 · 2025-08-19T08:18:04.000Z
diff --git a/.github/workflows/base-ci-goreleaser.yaml b/.github/workflows/base-ci-goreleaser.yaml
@@ -28,6 +28,9 @@ on:
         required: false
         type: string
 
+permissions:
+  contents: read
+
 env:
   # renovate: datasource=github-releases depName=goreleaser/goreleaser-pro
   GORELEASER_PRO_VERSION: v2.11.2
