All CI jobs and the deploy workflow only need to read repo contents. Adding explicit top-level permissions satisfies zizmor's excessive-permissions audit. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2.1 KiB
2.1 KiB