From d91508090dee67a3d14d88f4d746c14d062ef51e Mon Sep 17 00:00:00 2001
From: Farzin Kazemzadeh <itisFarzin@proton.me>
Date: Wed, 24 Jun 2026 10:16:55 +0330
Subject: [PATCH] ci(python-tests): scope workflow token to contents:read

Signed-off-by: Farzin Kazemzadeh <itisFarzin@proton.me>
---
 .github/workflows/python-tests.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/python-tests.yaml b/.github/workflows/python-tests.yaml
index bd63159..b6dd871 100644
--- a/.github/workflows/python-tests.yaml
+++ b/.github/workflows/python-tests.yaml
@@ -1,5 +1,7 @@
 name: python tests
 run-name: python tests
+permissions:
+  contents: read
 
 on:
   push: