ci: Reduce permissions of jobs

cmfcmf · web-flow · commit ab70d43786e7 · 2025-10-12T14:42:14.000+02:00
diff --git a/.github/workflows/commitlint.yml b/.github/workflows/commitlint.yml
@@ -1,5 +1,7 @@
 name: Lint Commit Messages
 on: [pull_request]
+permissions:
+  contents: read
 
 jobs:
   commitlint:
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -1,4 +1,6 @@
 name: CI
+permissions:
+  contents: read
 
 # Automatically cancel outdated runs for the same PR/branch:
 # https://stackoverflow.com/a/72408109
