From dcb74fa2dbab28c3d402221251a10820bd6b5c82 Mon Sep 17 00:00:00 2001
From: Jimisola Laursen <jimisola@jimisola.com>
Date: Sun, 23 Aug 2026 12:25:05 +0200
Subject: [PATCH] fix(ci): add explicit permissions to lint.yml

CodeQL flagged lint.yml (actions/missing-workflow-permissions): no
permissions block anywhere in the file, so it runs with whatever the
repo's default token permissions are rather than what it actually
needs. It only checks out and reads the repo -- contents: read covers
everything the job does.

Signed-off-by: Jimisola Laursen <jimisola@jimisola.com>
---
 .github/workflows/lint.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 3ab7e0d..60eaca9 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -3,6 +3,9 @@ on:
   workflow_dispatch:
   workflow_call:
 
+permissions:
+  contents: read
+
 jobs:
   linting:
     runs-on: ubuntu-latest