From 6509203bd8daec301102d63cab2c0deaef1169e6 Mon Sep 17 00:00:00 2001 From: Zhigang Zhang Date: Sun, 14 Dec 2025 23:27:42 +0800 Subject: [PATCH] Potential fix for code scanning alert no. 1: Workflow does not contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/node.js.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml index b5b295fd..23b6271f 100644 --- a/.github/workflows/node.js.yml +++ b/.github/workflows/node.js.yml @@ -3,6 +3,9 @@ name: Node.js CI +permissions: + contents: read + on: push: branches: [ master ]