Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions'

triniwiz · github-advanced-security[bot] · web-flow · commit 21e29940225e · 2026-04-06T15:21:08.000-04:00
Co-authored-by: Copilot Autofix powered by AI &lt;62310815+github-advanced-security[bot]@users.noreply.github.com&gt;
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -1,5 +1,9 @@
 name: Publish Packages
 
+permissions:
+  contents: read
+  packages: read
+
 on:
   push:
     tags:
