build: harden bench.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
2022-11-04 01:19:08 +02:00 · 2022-11-04 01:19:08 +02:00 · ba14ba7d0f
parent a2e2c30d59
commit ba14ba7d0f
1 changed files with 3 additions and 0 deletions
--- a/.github/workflows/bench.yml
+++ b/.github/workflows/bench.yml
@ -5,6 +5,9 @@ on:
    branches:
      - master

+permissions:
+  contents: read  #  to fetch code (actions/checkout)
+
 jobs:
  check_benchmark:
    runs-on: ubuntu-latest