python-publish: contents: read at toplevel

Signed-off-by: William Woodruff <william@trailofbits.com>
2024-03-19 16:41:37 -04:00
parent f4c64fb836
commit 231e6b5f6f
1 changed files with 3 additions and 0 deletions
@@ -12,6 +12,9 @@ on:
  release:
    types: [published]

+permissions:
+  contents: read
+
 jobs:
  release-build:
    runs-on: ubuntu-latest