From 0419bf5ea54e4c991fcdff58531f9b84d9c6aafc Mon Sep 17 00:00:00 2001
From: Steve Boyd <emteknetnz@gmail.com>
Date: Tue, 23 Apr 2024 09:39:33 +1200
Subject: [PATCH] FIX Set contents read permissions for genmatrix job

---
 .github/workflows/ci.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 54aaa11..50072bb 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -93,7 +93,10 @@ jobs:
     # gha-generate-matrix script.php will sanitise matrix outputs so they're safe to use within bash
     outputs:
       matrix: ${{ steps.generate-matrix.outputs.matrix }}
-    
+
+    permissions:
+      contents: read
+
     steps:
       - name: Generate matrix
         id: generate-matrix