CI: add explicit permissions block to clang-tidy workflow

Set minimal permissions (contents: read) as flagged by CodeQL. Signed-off-by: Ramon Roche <mrpollo@gmail.com>
2026-05-21 04:33:10 +08:00 · 2026-02-09 14:15:50 -08:00
parent 8a007d38e7
commit 618a6aa98f
1 changed files with 3 additions and 0 deletions
@@ -12,6 +12,9 @@ on:
    paths-ignore:
      - 'docs/**'

+permissions:
+  contents: read
+
 jobs:
  build:
    runs-on: [runs-on, runner=16cpu-linux-x64, "run-id=${{ github.run_id }}", "extras=s3-cache"]