Define contents permissions on "dependabot validate" workflow (jaeger…

…tracing#5874) Signed-off-by: Mahad Zaryab <mahadzaryab1@gmail.com>
mahadzaryab1 · Aug 31, 2024 · 0965c59 · 0965c59
1 parent 100479a
commit 0965c59
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/ci-lint-dependabot-config.yml b/.github/workflows/ci-lint-dependabot-config.yml
@@ -5,6 +5,11 @@ on:
     paths:
       - '.github/dependabot.yml'
       - '.github/workflows/validate-dependabot-config.yml'
+
+# See https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
+permissions:
+  contents: read
+
 jobs:
   validate:
     runs-on: ubuntu-latest