From 64bb6e7ffa9f7cd19d120e17ed75c7ea20f73680 Mon Sep 17 00:00:00 2001
From: Alex Malkevich <3644678+gund@users.noreply.github.com>
Date: Thu, 8 Dec 2022 03:00:52 +0100
Subject: [PATCH] ci(ga): limit test workflow to read-only access

---
 .github/workflows/test.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 11107070..29e8cf41 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -12,6 +12,9 @@ on:
   # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 env:
   NX_CLOUD_DISTRIBUTED_EXECUTION: true
   NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}