CI: Restrict default permissions

tacaswell · tacaswell · commit 452165cf124f · 2025-07-17T23:25:00.000-04:00
Reduces risk of arbitrary code is run by attacker.
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
@@ -1,4 +1,6 @@
 name: Tests
+permissions:
+  contents: read
 on:
   push:
     branches:
