From 6dae3ff363459fa1c44bfa2e9a8c491790efa434 Mon Sep 17 00:00:00 2001
From: Leander Furumo <leander@furumo.eu>
Date: Wed, 15 Jan 2025 12:52:54 +0100
Subject: [PATCH] specify workflow permissions

---
 .github/workflows/deploy.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 651cefc..682fcd1 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -22,3 +22,7 @@ jobs:
 
       - name: Clean up
         run: rm -rf ~/.ssh
+
+    permissions:
+      contents: read
+      pull-requests: write