From f842a021878edbe7a13135dd38e0d50d1e047796 Mon Sep 17 00:00:00 2001
From: Stewart Blacklock <stewart.f.blacklock@intel.com>
Date: Tue, 5 Nov 2024 08:11:54 -0800
Subject: [PATCH] Update main.yml

fixing openssf scorecard item on token permissions.
---
 .github/workflows/main.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 4c6b3e8..3d7b8c3 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -2,6 +2,8 @@
 
 name: CI
 
+permissions: read-all
+
 # Controls when the workflow will run
 on:
   # Triggers the workflow on push or pull request events but only for the "devel" branch