From 8a3e8dd7458e5d9ba6b4317a4b1423b4910d4014 Mon Sep 17 00:00:00 2001
From: Russ Cox <rsc@swtch.com>
Date: Mon, 5 Jun 2023 17:24:49 -0400
Subject: [PATCH] set workflow permission to read-only (#327)

Co-authored-by: Damien Neil <neild@users.noreply.github.com>
---
 .github/workflows/test.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 34e082f..a85a606 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,5 +1,7 @@
 on: [push, pull_request]
 name: Test
+permissions:
+  contents: read
 jobs:
   test:
     strategy: