[StepSecurity] Apply security best practices

stepsecurity-app[bot] · web-flow · commit 4f62ed3e2e7e · 2026-03-07T01:31:15.000Z
Signed-off-by: StepSecurity Bot &lt;bot@stepsecurity.io&gt;
diff --git a/.github/workflows/notion-pr-sync.yml b/.github/workflows/notion-pr-sync.yml
@@ -43,6 +43,9 @@ on:
         auto_merge_disabled,
       ]
 
+permissions:
+  contents: read
+
 jobs:
   request:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/publish-new-release.yml b/.github/workflows/publish-new-release.yml
@@ -7,6 +7,9 @@ on:
     types:
       - closed
 
+permissions:
+  contents: read
+
 jobs:
   release:
     permissions:
