build: harden benchmark.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
ardatan · Sep 25, 2022 · 0f98fd3 · 0f98fd3
1 parent f61f072
commit 0f98fd3
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
@@ -8,6 +8,9 @@ on:
   pull_request: {}
   workflow_dispatch: {}
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
   federation-benchmark:
     name: Federation Benchmark with ${{matrix.products_size}} Products