From b296baaa3c150afd80fb5206d5fba5fdc6dcd3ff Mon Sep 17 00:00:00 2001
From: "aikido-autofix[bot]"
 <119856028+aikido-autofix[bot]@users.noreply.github.com>
Date: Mon, 14 Sep 2026 14:41:01 +0000
Subject: [PATCH] fix(security): autofix Overly Broad Permissions in GitHub
 Actions Workflows is risky

---
 .github/workflows/ci.yml      | 6 ++++--
 .github/workflows/publish.yml | 6 ++++--
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9a15d71..73a0d54 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -5,12 +5,14 @@ on:
     branches: [main]
   workflow_dispatch:
 
-permissions: 
-  packages: write
+permissions: {}
 
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
 
     env:
       DOTNET_NOLOGO: true
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index d7882d3..768908b 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -3,12 +3,14 @@ name: Publish
 on:
   workflow_dispatch:
 
-permissions: 
-  packages: write
+permissions: {}
 
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
 
     env:
       DOTNET_NOLOGO: true