Scope down GitHub token permissions for deny_dirty_cargo_locks.yml

AdnaneKhan · AdnaneKhan · commit 84f059cfff58 · 2025-10-22T10:32:24.000-04:00
Signed-off-by: Adnan Khan &lt;adnanek@amazon.com&gt;
diff --git a/.github/workflows/deny_dirty_cargo_locks.yml b/.github/workflows/deny_dirty_cargo_locks.yml
@@ -2,6 +2,10 @@ name: Check no Cargo.lock files are dirty
 
 on: pull_request
 
+
+permissions:
+  contents: read
+
 jobs:
   no_dirty_cargo_locks_check:
     runs-on: ubuntu-latest
