add perms

maxammann · maxammann · commit 82babdf131c8 · 2025-11-27T17:11:17.000+01:00
diff --git a/.github/workflows/security-default-branch.yml b/.github/workflows/security-default-branch.yml
@@ -5,6 +5,9 @@ on:
 
 name: Security
 
+permissions:
+  contents: read
+
 jobs:
   sbom-trivy:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/security-pr.yml b/.github/workflows/security-pr.yml
@@ -3,6 +3,9 @@ on:
 
 name: Security
 
+permissions:
+  contents: read
+
 jobs:
   semgrep:
     # Skip any PR created by dependabot to avoid permission issues:
