[StepSecurity] ci: Harden GitHub Actions

Signed-off-by: StepSecurity Bot <[email protected]>
openwall · Nov 17, 2024 · 838dd85 · 838dd85
1 parent 42570f8
commit 838dd85
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/merge-bot.yml b/.github/workflows/merge-bot.yml
@@ -28,6 +28,9 @@ name: Merge bot
     types:
       - submitted
 
+permissions:
+  contents: read
+
 jobs:
   call-merge-pr:
     permissions: