[SECURITY] limit action permissions more.

reactive-firewall · reactive-firewall · commit 84a4d609788d · 2026-01-15T14:19:04.000-08:00
diff --git a/.github/workflows/Tests.yml b/.github/workflows/Tests.yml
@@ -16,7 +16,11 @@ on:
       - ready_for_review
 
 # Declare default permissions as read only.
-permissions: read-all
+permissions:
+  contents: read  # for actions/checkout to fetch code
+  actions: read
+  pull-requests: read
+
 
 jobs:
   BUILD:
