build: harden GitHub workflow permissions

[openwrt/staging/hauke.git] / .github / workflows / tools.yml

diff --git a/.github/workflows/tools.yml b/.github/workflows/tools.yml
index be967833cb4a92aca1896990eb78480ff4e5ded9..4e423fdd6292c3346cca44804040f65699224d44 100644 (file)
--- a/.github/workflows/tools.yml
+++ b/.github/workflows/tools.yml
@@ -6,6 +6,9 @@ on:
       - 'tools/**'
       - '.github/workflows/tools.yml'
 
+permissions:
+  contents: read
+
 jobs:
   build:
     name: tools-${{ matrix.os }}