From 53ffe35a5298e87dec80122fbb613cc564ba4407 Mon Sep 17 00:00:00 2001
From: Dirk Klimpel <5740567+dklimpel@users.noreply.github.com>
Date: Tue, 21 May 2024 21:18:07 +0200
Subject: [PATCH] restrict pipeline permissions

---
 .github/workflows/golangci-lint.yaml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/golangci-lint.yaml b/.github/workflows/golangci-lint.yaml
index c36af0cc..9ec7ec63 100644
--- a/.github/workflows/golangci-lint.yaml
+++ b/.github/workflows/golangci-lint.yaml
@@ -6,6 +6,11 @@ on:
     branches:
       - master
       - "/^v\\d+\\.\\d+(\\.\\d+)?(-\\S*)?$/"
+
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   golangci:
     name: lint
@@ -16,7 +21,7 @@ jobs:
         with:
           go-version-file: go.mod
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v5
+        uses: golangci/golangci-lint-action@v6
         with:
           version: latest
           only-new-issues: true