From 54162c187ae87ae65c1c9eba23995ff83f3251c4 Mon Sep 17 00:00:00 2001
From: Baptiste Augrain <daiyam@zokugun.org>
Date: Sat, 18 Apr 2026 12:39:40 +0200
Subject: [PATCH] ci: fix permissions

---
 .github/workflows/publish-insider-spearhead.yml | 1 +
 .github/workflows/publish-stable-spearhead.yml  | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.github/workflows/publish-insider-spearhead.yml b/.github/workflows/publish-insider-spearhead.yml
index bc7846e..fb6c91c 100644
--- a/.github/workflows/publish-insider-spearhead.yml
+++ b/.github/workflows/publish-insider-spearhead.yml
@@ -31,6 +31,7 @@ env:
 jobs:
   check:
     runs-on: macos-15
+    permissions: {}
     outputs:
       MS_COMMIT: ${{ env.MS_COMMIT }}
       MS_TAG: ${{ env.MS_TAG }}
diff --git a/.github/workflows/publish-stable-spearhead.yml b/.github/workflows/publish-stable-spearhead.yml
index 03976b3..792f7db 100644
--- a/.github/workflows/publish-stable-spearhead.yml
+++ b/.github/workflows/publish-stable-spearhead.yml
@@ -31,6 +31,7 @@ env:
 jobs:
   check:
     runs-on: macos-15
+    permissions: {}
     outputs:
       MS_COMMIT: ${{ env.MS_COMMIT }}
       MS_TAG: ${{ env.MS_TAG }}