add tigher scoped repo perms to workflow run template file

2022-03-28 16:57:03 -07:00
parent 5bd031f307
commit aee1a20835
1 changed files with 3 additions and 0 deletions
@@ -7,6 +7,9 @@
 name: 'Dependency Review'
 on: [pull_request]

+permissions:
+  repo: read
+
 jobs:
  dependency-review:
    runs-on: ubuntu-latest