From 891b4a7c237ce983d65dcea797233e86edb75b67 Mon Sep 17 00:00:00 2001
From: Terry Burton <tez@terryburton.co.uk>
Date: Wed, 11 Sep 2024 13:21:00 +0100
Subject: [PATCH] CI: Limit permissions

---
 .github/workflows/coverity.yml     | 2 ++
 .github/workflows/super-linter.yml | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
index 3c40863c9..21545c8c4 100644
--- a/.github/workflows/coverity.yml
+++ b/.github/workflows/coverity.yml
@@ -5,6 +5,8 @@ on:
     branches:
       - coverity-scan
 
+permissions: read-all
+
 jobs:
 
   coverity:
diff --git a/.github/workflows/super-linter.yml b/.github/workflows/super-linter.yml
index 316f45a60..7aa9476a5 100644
--- a/.github/workflows/super-linter.yml
+++ b/.github/workflows/super-linter.yml
@@ -2,6 +2,8 @@
 
 name: Super-Linter
 
+permissions: read-all
+
 on:
   push:
   pull_request: