Define contents permissions on "dependabot validate" workflow (jaeger…

…tracing#5874) Signed-off-by: Jared Tan <[email protected]>
JaredTan95 · Aug 28, 2024 · de16ff7 · de16ff7
1 parent 62d4605
commit de16ff7
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/ci-lint-dependabot-config.yml b/.github/workflows/ci-lint-dependabot-config.yml
@@ -5,6 +5,11 @@ on:
     paths:
       - '.github/dependabot.yml'
       - '.github/workflows/validate-dependabot-config.yml'
+
+# See https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
+permissions:
+  contents: read
+
 jobs:
   validate:
     runs-on: ubuntu-latest