set default permissions as read only for ci yml

zhangyuxuann · zhangyuxuann · commit 4dcbdcba20c2 · 2025-02-10T12:09:26.000+08:00
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -9,6 +9,9 @@ on:
   pull_request:
     branches: [ "main" ]
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   build:
 
