Restrict permissions for Codex workflow

dbabokin · dbabokin · commit 20843010f168 · 2025-10-14T16:32:20.000-07:00
diff --git a/.github/workflows/codex-pr-review.yml b/.github/workflows/codex-pr-review.yml
@@ -23,6 +23,9 @@ on:
         required: true
         type: number
 
+permissions:
+  contents: read
+
 jobs:
   comment:
     runs-on: ubuntu-latest
