Add read permission to all build jobs

2025-10-27 21:22:32 +01:00
parent 7bbd2042ae
commit 23b2ca9af4
5 changed files with 12 additions and 0 deletions
@@ -11,6 +11,8 @@ jobs:
    # Needs to stay on 22.04 as long as we're using manylinux_2_28
    # as libxcb-cursor0 in 22.04 supports glibc >= 2.17
    runs-on: ubuntu-22.04
+    permissions:
+      contents: read
    env:
      PYTHON_VERSION: "3.13"
      LINUX_TAG: "manylinux_2_28"