commit 311df6bb0f861154e6a27144c226c805c7554a94
author Alex <aleksandrosansan@gmail.com> Mon Sep 26 15:52:46 2022 +0100
committer Bram Moolenaar <Bram@vim.org> Mon Sep 26 15:52:46 2022 +0100
tree 73269e6b635854c363853400bc7135bed4095fda
parent 838b746cce7ea863acdb81e3f44eec2ea90de92a

patch 9.0.0593: CI actions have too many permissions

Problem:    CI actions have too many permissions.
Solution:   Restrict permissions to what is required. (closes #11223)

.github/workflows/ci.yml

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6c1b359..c988949 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,6 +12,9 @@
   group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.head_ref || github.sha }}
   cancel-in-progress: true
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
   linux:
     runs-on: ubuntu-20.04