From 144b184667908ac13d50a34c383f03dae91f37fa Mon Sep 17 00:00:00 2001
From: Timmie Smith <timmie.smith@intel.com>
Date: Tue, 23 Jan 2024 14:52:52 -0600
Subject: [PATCH] Adding read-only permission to all jobs in the CI flow to
 ensure minimum required access (#1300)

---
 .github/workflows/ci.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 02a42c836c..d758aee050 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,4 +1,4 @@
-# Copyright (c) 2021-2023 Intel Corporation
+# Copyright (c) 2021-2024 Intel Corporation
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -25,6 +25,8 @@ on:
       - synchronize
       - reopened
 
+permissions: read-all
+
 env:
   BUILD_CONCURRENCY: 2
   MACOS_BUILD_CONCURRENCY: 3