From b718be1f8f927c37987a0a97960d0d6e93631a52 Mon Sep 17 00:00:00 2001 From: arpitjain099 Date: Wed, 13 May 2026 11:48:10 +0000 Subject: [PATCH] ci: pin contents: read on md-validation and openmetrics Both workflows are PR-time read-only checks: markdown link checking and ABNF validation of the OpenMetrics 2.0 spec. Signed-off-by: arpitjain099 --- .github/workflows/md-validation.yml | 3 +++ .github/workflows/openmetrics.yml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/md-validation.yml b/.github/workflows/md-validation.yml index f6d5e8f05..946654990 100644 --- a/.github/workflows/md-validation.yml +++ b/.github/workflows/md-validation.yml @@ -3,6 +3,9 @@ name: Markdown Validation on: pull_request: +permissions: + contents: read + jobs: check-md-files: runs-on: ubuntu-latest diff --git a/.github/workflows/openmetrics.yml b/.github/workflows/openmetrics.yml index 18584638b..539f05eec 100644 --- a/.github/workflows/openmetrics.yml +++ b/.github/workflows/openmetrics.yml @@ -5,6 +5,9 @@ on: paths: - 'docs/specs/om/open_metrics_spec_2_0.md' +permissions: + contents: read + jobs: check-abnf: runs-on: ubuntu-latest