From 1b08bacc2102ed3e95ba964ea12990f19e7a6d64 Mon Sep 17 00:00:00 2001
From: Ben Westgate <BenWestgate@protonmail.com>
Date: Thu, 24 Sep 2026 12:45:13 -0500
Subject: [PATCH] Restrict test workflow permissions

---
 .github/workflows/python-package.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/python-package.yml b/.github/workflows/python-package.yml
index 9f99e62..da268bb 100644
--- a/.github/workflows/python-package.yml
+++ b/.github/workflows/python-package.yml
@@ -7,6 +7,9 @@ on:
 env:
   SOURCE_DATE_EPOCH: "1763060600"
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ${{ matrix.os }}