ci: scope down permissions for ci_static-analysis.yaml

AdnaneKhan · AdnaneKhan · commit 13182eafb751 · 2025-10-21T17:13:57.000-04:00
diff --git a/.github/workflows/ci_static-analysis.yaml b/.github/workflows/ci_static-analysis.yaml
@@ -3,6 +3,9 @@ name: Static analysis checks
 on:
   workflow_call:
 
+permissions:
+  contents: read
+
 jobs:
   analysis:
     runs-on: ubuntu-latest
