ci: Add explicit permissions to workflow jobs

sliedig · sliedig · commit 6a0825ace24f · 2026-03-16T14:05:20.000+08:00
- Add actions: read permission for workflow execution access
- Add contents: read permission for repository content access
- Scope down GitHub Token permissions following security best practices
diff --git a/.github/workflows/on_merged_pr.yml b/.github/workflows/on_merged_pr.yml
@@ -7,6 +7,8 @@ on:
       - completed
 
 permissions:
+  actions: read
+  contents: read
   issues: write
 
 jobs:
