From 031a9b5b01ee1e31b7b95dfe53aa5342dafa7f42 Mon Sep 17 00:00:00 2001
From: Johan Wassberg <jocar@sunet.se>
Date: Mon, 1 Jun 2026 14:12:24 +0200
Subject: [PATCH] Allow for only read

---
 .github/workflows/publiccode-yml-validation.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/publiccode-yml-validation.yml b/.github/workflows/publiccode-yml-validation.yml
index 8d9609cf..40a75f9a 100644
--- a/.github/workflows/publiccode-yml-validation.yml
+++ b/.github/workflows/publiccode-yml-validation.yml
@@ -2,6 +2,9 @@ name: publiccode.yml validation
 
 on: [pull_request, push]
 
+permissions:
+  contents: read
+
 jobs:
   publiccode_yml_validation:
     runs-on: ubuntu-latest