chore(ci): set least-privilege workflow permissions (zizmor) (#41161)

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Evan Rusackas
2026-06-17 15:41:47 -07:00
committed by GitHub
parent fb2b9fa8ff
commit 9da54eff84
2 changed files with 10 additions and 0 deletions

View File

@@ -1,6 +1,11 @@
# Python integration tests
name: Python-Integration
# Least-privilege default for GITHUB_TOKEN. Jobs that need more (e.g. OIDC for
# codecov uploads) opt in via their own job-level `permissions:` block.
permissions:
contents: read
on:
push:
branches: