default perms

masl2 · masl2 · commit 5097dc235562 · 2025-12-24T11:10:03.000Z
diff --git a/.github/workflows/stage-1-commit.yaml b/.github/workflows/stage-1-commit.yaml
@@ -32,6 +32,10 @@ on:
         required: true
         type: string
 
+
+permissions:
+  contents: read
+
 jobs:
   scan-secrets:
     name: "Scan secrets"
