[StepSecurity] ci: Harden GitHub Actions (#4551)

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
2026-08-04 08:22:19 +00:00 · 2024-12-17 15:20:06 +01:00
parent 861ec9c3c6
commit 5362012fdd
9 changed files with 27 additions and 0 deletions
@@ -14,6 +14,9 @@ on:
  push:
    branches: ["develop"]

+permissions:
+  contents: read
+
 jobs:
  analysis:
    name: Scorecard analysis