ci: add minimum GitHub at the workflow level for pip-tools.yaml

ashishkurmi · ashishkurmi · commit 24e35c12aa3e · 2022-09-21T19:18:01.000-07:00
Signed-off-by: Ashish Kurmi &lt;akurmi@stepsecurity.io&gt;
diff --git a/.github/workflows/pip-tools.yaml b/.github/workflows/pip-tools.yaml
@@ -11,6 +11,9 @@ on:
     # Run weekly on day 0 at 00:00 UTC
     - cron: "0 0 * * 0"
 
+permissions:
+  contents: read
+
 jobs:
   update-dependencies:
     permissions:
