build: harden rust.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
3 years ago · 60902236e4
parent b0c329da04
commit 60902236e4
1 changed files with 3 additions and 0 deletions
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@ -4,6 +4,9 @@ on:
  - push
  - pull_request

+permissions:
+  contents: read #  to fetch code (actions/checkout)
+
 jobs:
  check-rust:
    name: Check Rust