default perms

masl2 · nhsd-david-wass · commit a3f693dbec72 · 2026-01-06T14:37:40.000Z
diff --git a/.github/workflows/stage-1-commit.yaml b/.github/workflows/stage-1-commit.yaml
@@ -36,6 +36,10 @@ on:
         required: true
         type: string
 
+
+permissions:
+  contents: read
+
 jobs:
   scan-secrets:
     name: "Scan secrets"
