From d67c8614651370efa7f606be1207ad0ea394eef0 Mon Sep 17 00:00:00 2001
From: Matt Andreko <mandreko@bitwarden.com>
Date: Fri, 6 Jun 2025 09:30:48 -0400
Subject: [PATCH] Specified explicit permissions for action. (#405)

---
 .github/workflows/check-run.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/check-run.yml b/.github/workflows/check-run.yml
index 5e9c2e5f..61e19b1d 100644
--- a/.github/workflows/check-run.yml
+++ b/.github/workflows/check-run.yml
@@ -3,12 +3,14 @@ name: Check PR run
 on:
   workflow_call:
 
-permissions: read-all
+permissions: {}
 
 jobs:
   check:
     name: Check
     runs-on: ubuntu-22.04
+    permissions:
+      contents: read
 
     steps:
       - name: Get user permission