workflow: Add top-level permissions

Set:
```
permissions:
  contents: read
```
as the default top-level permissions explicitly
to conform to recommended security practices e.g.
https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
This commit is contained in:
stevenhorsman
2025-05-28 15:05:52 +01:00
parent 353d0822fd
commit 088e97075c
53 changed files with 161 additions and 0 deletions

View File

@@ -2,6 +2,9 @@ name: Kata Containers CI (manually triggered)
on:
workflow_dispatch:
permissions:
contents: read
jobs:
kata-containers-ci-on-push:
permissions: