Merge pull request #9 from DanielVolz/fix/codeql-manual-trigger

ci: add explicit permissions to all workflow jobs
2025-12-30 13:43:15 +01:00
parent fa15650f52 2d17fde8f1
commit 12d5aeb0fb
2 changed files with 8 additions and 0 deletions
@@ -25,6 +25,8 @@ jobs:
  backend-test:
    name: Backend Tests
    runs-on: ubuntu-latest
+    permissions:
+      contents: read
    defaults:
      run:
        working-directory: backend
@@ -42,6 +44,8 @@ jobs:
  frontend-build:
    name: Frontend Build
    runs-on: ubuntu-latest
+    permissions:
+      contents: read
    defaults:
      run:
        working-directory: frontend
@@ -15,6 +15,8 @@ jobs:
  backend-test:
    name: Backend Tests
    runs-on: ubuntu-latest
+    permissions:
+      contents: read
    defaults:
      run:
        working-directory: backend
@@ -53,6 +55,8 @@ jobs:
  frontend-build:
    name: Frontend Build
    runs-on: ubuntu-latest
+    permissions:
+      contents: read
    defaults:
      run:
        working-directory: frontend