Add least-privilege permissions to CI workflow

honnibal · honnibal · commit d4bb796b5ed3 · 2026-03-27T08:49:43.000+01:00
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -19,7 +19,8 @@ on:
       - "*.mdx"
       - "website/**"
 
-permissions: {}
+permissions:
+  contents: read
 
 jobs:
   validate:
diff --git a/.github/workflows/universe_validation.yml b/.github/workflows/universe_validation.yml
@@ -13,7 +13,8 @@ on:
     paths:
       - "website/meta/universe.json"
 
-permissions: {}
+permissions:
+  contents: read
 
 jobs:
   validate:
