feat: define workflow token permissions

UlisesGascon · UlisesGascon · commit 5f6b4031ebab · 2025-09-04T15:21:50.000+02:00
Ref: https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
diff --git a/.github/workflows/npm_release_cli.yml b/.github/workflows/npm_release_cli.yml
@@ -10,6 +10,9 @@ on:
 env:
   NPM_TAG: 'next'
 
+permissions:
+  contents: read
+
 jobs:
   release:
     runs-on: macos-latest
diff --git a/.github/workflows/npm_release_doctor.yml b/.github/workflows/npm_release_doctor.yml
@@ -14,6 +14,9 @@ defaults:
 env:
   NPM_TAG: 'next'
 
+permissions:
+  contents: read
+
 jobs:
   release:
     runs-on: ubuntu-latest
