From 62e27bb61680482ec9a1a0a27f7bb29946c9472e Mon Sep 17 00:00:00 2001 From: Alex Date: Sun, 30 Oct 2022 22:48:14 +0200 Subject: [PATCH] build: harden nuget.yml permissions Signed-off-by: Alex --- .github/workflows/nuget.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/nuget.yml b/.github/workflows/nuget.yml index 7b8174a1e..40ab4244c 100644 --- a/.github/workflows/nuget.yml +++ b/.github/workflows/nuget.yml @@ -13,6 +13,9 @@ on: - 'Doc/**' - 'appveyor.yml' +permissions: + contents: read # to fetch code (actions/checkout) + jobs: build: