From ad4452032fc5da868a654054a9026f9b8d88d1c2 Mon Sep 17 00:00:00 2001 From: Brace Sproul Date: Tue, 24 Feb 2026 07:52:47 -0800 Subject: [PATCH] fix: Security fixes for ci (#974) --- .github/workflows/agent-ci.yml | 3 +++ .github/workflows/ci.yml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/agent-ci.yml b/.github/workflows/agent-ci.yml index 21e9edd4..948fa8a1 100644 --- a/.github/workflows/agent-ci.yml +++ b/.github/workflows/agent-ci.yml @@ -1,5 +1,8 @@ name: Agent CI +permissions: + contents: read + on: push: branches: ["main"] diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 27bc2309..3ff4de76 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -2,6 +2,9 @@ name: CI +permissions: + contents: read + on: push: branches: ["main"]