From d0afd218e179edc124b3bc2fe4738da817fce948 Mon Sep 17 00:00:00 2001
From: Alex <aleksandrosansan@gmail.com>
Date: Thu, 3 Nov 2022 23:37:27 +0200
Subject: [PATCH] build: harden golang-analysis.yml permissions

Signed-off-by: Alex <aleksandrosansan@gmail.com>
---
 .github/workflows/golang-analysis.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/golang-analysis.yml b/.github/workflows/golang-analysis.yml
index 3a74e61a2..b9476f94e 100644
--- a/.github/workflows/golang-analysis.yml
+++ b/.github/workflows/golang-analysis.yml
@@ -1,6 +1,9 @@
 on: [push, pull_request]
 name: Go Checks
 
+permissions:
+  contents: read  #  to fetch code (actions/checkout)
+
 jobs:
   unit:
     runs-on: ubuntu-latest