From bd29bce66cb3bc713cca895f54995b6c73a9ffaf Mon Sep 17 00:00:00 2001
From: Roger Qiu <roger.qiu@polyhack.io>
Date: Fri, 20 Dec 2024 16:16:03 -0600
Subject: [PATCH] WIP

---
 .github/workflows/library-js-feature.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/workflows/library-js-feature.yml b/.github/workflows/library-js-feature.yml
index 93f5808..9fda004 100644
--- a/.github/workflows/library-js-feature.yml
+++ b/.github/workflows/library-js-feature.yml
@@ -10,6 +10,8 @@ jobs:
     runs-on: ubuntu-latest
     container:
       image: ghcr.io/matrixai/github-runner
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@v4
       - name: Run linting
@@ -24,6 +26,10 @@ jobs:
     runs-on: ubuntu-latest
     container:
       image: ghcr.io/matrixai/github-runner
+    permissions:
+      contents: read
+      actions: write
+      checks: write
     steps:
       - uses: actions/checkout@v4
       - name: Run tests
@@ -54,6 +60,9 @@ jobs:
     runs-on: ubuntu-latest
     container:
       image: ghcr.io/matrixai/github-runner
+    permissions:
+      contents: read
+      actions: write
     steps:
       - uses: actions/checkout@v4
       - name: Run build