[StepSecurity] ci: Harden GitHub Actions (#4551)

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
2026-07-29 23:23:02 +04:00 · 2024-12-17 06:20:06 -08:00
parent 861ec9c3c6
commit 5362012fdd
9 changed files with 27 additions and 0 deletions
@@ -14,6 +14,9 @@ on:
  push:
    branches: ["develop"]

+permissions:
+  contents: read
+
 jobs:
  analysis:
    name: Scorecard analysis