From a3007de2070d6c5705b8f86fbc323cfde2e2c77e Mon Sep 17 00:00:00 2001
From: Sima Bagheri <37793675+simaba@users.noreply.github.com>
Date: Fri, 10 Jul 2026 18:21:36 +0800
Subject: [PATCH] ci: use read-only workflow permissions

---
 .github/workflows/ci.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 068a5b1..fcd0fd6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -22,6 +22,9 @@ on:
       - 'docs/**'
       - '**/*.md'
 
+permissions:
+  contents: read
+
 jobs:
   lint-and-check:
     runs-on: ubuntu-latest