From aee1a2083533d8f67f8f771a3671c3cba9de020a Mon Sep 17 00:00:00 2001
From: Eli Reisman <elireisman@github.com>
Date: Mon, 28 Mar 2022 16:57:03 -0700
Subject: [PATCH] add tigher scoped repo perms to workflow run template file

---
 code-scanning/dependency-review.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/code-scanning/dependency-review.yml b/code-scanning/dependency-review.yml
index c342269..eb3a90b 100644
--- a/code-scanning/dependency-review.yml
+++ b/code-scanning/dependency-review.yml
@@ -7,6 +7,9 @@
 name: 'Dependency Review'
 on: [pull_request]
 
+permissions:
+  repo: read
+
 jobs:
   dependency-review:
     runs-on: ubuntu-latest