Restrict permissions of default github token in signing workflow (#2119)

bugsnag · Dec 6, 2024 · 9b821de · 9b821de
1 parent 8238dcf
commit 9b821de
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/signing.yml b/.github/workflows/signing.yml
@@ -1,5 +1,7 @@
 name: Sign release assets
 
+permissions: read-all
+
 on:
   release:
     types: [released]