Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions'

serhalp · github-advanced-security[bot] · web-flow · commit aa72bd940b42 · 2026-04-25T16:03:03.000-04:00
Co-authored-by: Copilot Autofix powered by AI &lt;62310815+github-advanced-security[bot]@users.noreply.github.com&gt;
diff --git a/.github/workflows/deploy-canary.yml b/.github/workflows/deploy-canary.yml
@@ -2,6 +2,9 @@ on:
   push:
     branches: [main]
 
+permissions:
+  contents: read
+
 jobs:
   deploy-canary:
     if: github.repository == 'npmx-dev/npmx.dev'
