From: Alb3e3 <74142887+Alb3e3@users.noreply.github.com>
Date: Sat, 27 Jun 2026 11:52:31 +0000 (+0200)
Subject: ci: set least-privilege GITHUB_TOKEN permissions for meson workflow
X-Git-Tag: json-c-0.19-20260627~4^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=d0cc18738c1c205afbf6b1e54a40fc97bf139aa1;p=thirdparty%2Fjson-c.git

ci: set least-privilege GITHUB_TOKEN permissions for meson workflow

The meson workflow only builds and tests across platforms; none of its
jobs write to the repository, packages, or other GitHub resources. Add a
workflow-level `permissions: { contents: read }` block so the default
GITHUB_TOKEN follows least privilege instead of inheriting the broad
read/write scopes granted by default.
---

diff --git a/.github/workflows/meson.yml b/.github/workflows/meson.yml
index 8edad33..d85e876 100644
--- a/.github/workflows/meson.yml
+++ b/.github/workflows/meson.yml
@@ -6,6 +6,9 @@ concurrency:
   group: ${{github.workflow}}-${{github.head_ref}}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   Linux-GCC:
     runs-on: ubuntu-22.04