Add read permission to all build jobs

2025-10-27 21:22:32 +01:00
parent 7bbd2042ae
commit 23b2ca9af4
5 changed files with 12 additions and 0 deletions
@@ -9,6 +9,8 @@ jobs:
  buildMac-AMD64:
    needs: buildAssets
    runs-on: macos-latest
+    permissions:
+      contents: read
    env:
      PYTHON_VERSION: "3.13"
      PACKAGE_ARCH: x86_64
@@ -40,6 +42,8 @@ jobs:
  buildMac-M1:
    needs: buildAssets
    runs-on: macos-latest
+    permissions:
+      contents: read
    env:
      PYTHON_VERSION: "3.13"
      PACKAGE_ARCH: aarch64