From 491e68e8c1a8dc4c46c898759c821e6928e83b02 Mon Sep 17 00:00:00 2001
From: Paul Abel <128620221+pdabelf5@users.noreply.github.com>
Date: Thu, 15 Aug 2024 17:40:16 +0100
Subject: [PATCH] correct base workflow permissions (#6213)

---
 .github/workflows/build-ot-dependency.yml  | 3 +++
 .github/workflows/build-ubi-dependency.yml | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/.github/workflows/build-ot-dependency.yml b/.github/workflows/build-ot-dependency.yml
index fc1e18fdde..faa882fccb 100644
--- a/.github/workflows/build-ot-dependency.yml
+++ b/.github/workflows/build-ot-dependency.yml
@@ -17,6 +17,9 @@ concurrency:
   group: ${{ github.ref_name }}-ot-build
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   build-docker:
     name: Build Docker Image
diff --git a/.github/workflows/build-ubi-dependency.yml b/.github/workflows/build-ubi-dependency.yml
index 7cf3403daa..ba059f1643 100644
--- a/.github/workflows/build-ubi-dependency.yml
+++ b/.github/workflows/build-ubi-dependency.yml
@@ -25,6 +25,9 @@ concurrency:
   group: ${{ github.ref_name }}-ubi-ppc64le-build
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   checks:
     name: Check versions