Scope down GitHub token permissions for deny_dirty_cargo_locks.yml

AdnaneKhan · AdnaneKhan · commit 792f6514160b · 2025-10-20T18:11:24.000-04:00
diff --git a/.github/workflows/deny_dirty_cargo_locks.yml b/.github/workflows/deny_dirty_cargo_locks.yml
@@ -2,6 +2,10 @@ name: Check no Cargo.lock files are dirty
 
 on: pull_request
 
+
+permissions:
+  contents: read
+
 jobs:
   no_dirty_cargo_locks_check:
     runs-on: ubuntu-latest
