Add top-level permissions to pypi (#9945)

which are then overridden by the one job. the various bots like this better
pyca · Nov 30, 2023 · 6deb2b5 · 6deb2b5
1 parent 3fa1405
commit 6deb2b5
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/pypi-publish.yml b/.github/workflows/pypi-publish.yml
@@ -18,6 +18,9 @@ on:
 env:
   PUBLISH_REQUIREMENTS_PATH: .github/requirements/publish-requirements.txt
 
+permissions:
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest