Revoke all permissions to GH token except metadata read

Nargonath · Nargonath · commit 63fcb1df42d7 · 2022-06-11T17:53:40.000+02:00
diff --git a/.github/workflows/ci-module.yml b/.github/workflows/ci-module.yml
@@ -1,5 +1,7 @@
 name: ci
 
+permissions: {}
+
 on:
   push:
     branches:
