From e9fa7ff4c8d476a0d40ed1f6a8b4eefa95227f80 Mon Sep 17 00:00:00 2001
From: Matthew Burket <mburket@redhat.com>
Date: Tue, 13 Jan 2026 14:11:48 -0600
Subject: [PATCH] Add permissions to main CI

---
 .github/workflows/main.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index 61a266e..63614cc 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -13,6 +13,10 @@ concurrency:
   group: ${{ github.workflow }}-ci-${{ github.event.number || github.run_id }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   tests:
     name: Tests