restrict the permission in check workflow

gcanlin · gcanlin · commit 0f69c73e26e8 · 2025-07-02T14:49:28.000+08:00
Signed-off-by: fixedpoint &lt;961750412@qq.com&gt;
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
@@ -4,9 +4,15 @@ on:
     branches: [ master, dev ]
   pull_request:
     branches: [dev]
+
+permissions:
+  contents: read
+
 jobs:
   check:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     strategy:
       matrix:
         node: [ 12, 14, 16, 18 ]
