From 2328654ffce7509b7417d032b715be8c9f178274 Mon Sep 17 00:00:00 2001
From: Alex Goodman <wagoodman@users.noreply.github.com>
Date: Mon, 11 May 2026 12:30:14 -0400
Subject: [PATCH] minimal workflow permissions

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
---
 .github/workflows/codeql.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 6baf516..4c323ee 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -13,6 +13,8 @@ on:
   schedule:
     - cron: '38 11 * * 3'
 
+permissions: {}
+
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})