Update permissions for test job

The job checks out the code, so it needs repo read permissions. Co-authored-by: Nick <[email protected]>
cisagov · Oct 31, 2024 · 372b896 · 372b896
1 parent 5ffaf0e
commit 372b896
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -175,7 +175,9 @@ jobs:
     needs:
       - diagnostics
     # This job does not need any permissions
-    permissions: {}
+    permissions:
+      # actions/checkout needs this to fetch code
+      contents: read
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false