From 2d00514e229e30761d0c36b6bfcfce3178925fcc Mon Sep 17 00:00:00 2001
From: Alex <aleksandrosansan@gmail.com>
Date: Thu, 3 Nov 2022 23:36:53 +0200
Subject: [PATCH] build: harden docker-image.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
---
 .github/workflows/docker-image.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml
index 76e0c1c11..1d7237c5b 100644
--- a/.github/workflows/docker-image.yml
+++ b/.github/workflows/docker-image.yml
@@ -9,6 +9,9 @@ on:
     tags:
       - 'v*'
 
+permissions:
+  contents: read  #  to fetch code (actions/checkout)
+
 jobs:
   push_to_registry:
     if: github.repository == 'ipfs/kubo' || github.event_name == 'workflow_dispatch'