chore: add read permission for contents in release workflow

chenjiahan · chenjiahan · commit 8dec625a1e90 · 2026-07-07T21:20:42.000+08:00
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -57,6 +57,7 @@ jobs:
     runs-on: ubuntu-latest
     environment: npm
     permissions:
+      contents: read
       # Provenance generation in GitHub Actions requires "write" access to the "id-token"
       id-token: write
     steps:
