From 6ec200a6403f4d566da264dc1c52ba93e498065b Mon Sep 17 00:00:00 2001
From: bretg <bgorsline@gmail.com>
Date: Tue, 4 Feb 2025 12:51:33 -0500
Subject: [PATCH] tighten security oncode-path-changes

---
 .github/workflows/code-path-changes.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/code-path-changes.yml b/.github/workflows/code-path-changes.yml
index 04b49c4a1f..23e0c19db6 100644
--- a/.github/workflows/code-path-changes.yml
+++ b/.github/workflows/code-path-changes.yml
@@ -14,6 +14,9 @@ env:
   GITHUB_PR_NUMBER: ${{ github.event.pull_request.number }}
   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+permissions:
+  contents: read
+
 jobs:
   notify:
     runs-on: ubuntu-latest