From 361af0dd0b78908ee4e6457af66887d421554bcf Mon Sep 17 00:00:00 2001
From: Jonas Thelemann <e-mail@jonas-thelemann.de>
Date: Tue, 26 Aug 2025 01:52:00 +0200
Subject: [PATCH] ci(github): set workflow permissions

---
 .github/workflows/ci.yml               | 3 +++
 .github/workflows/release-schedule.yml | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 538168d6..3aa0a0b9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,5 +1,8 @@
 name: CI
 
+permissions:
+  contents: read
+
 on:
   pull_request:
   push:
diff --git a/.github/workflows/release-schedule.yml b/.github/workflows/release-schedule.yml
index 045b0760..6cd01527 100644
--- a/.github/workflows/release-schedule.yml
+++ b/.github/workflows/release-schedule.yml
@@ -1,5 +1,8 @@
 name: "Release: Scheduled"
 
+permissions:
+  contents: read
+
 on:
   schedule:
     - cron: "0 0 * * 0" # Every Sunday at 00:00 AM UTC on the default branch