From bb1cd38987ce7720fbe17881adfed6d103216ab4 Mon Sep 17 00:00:00 2001
From: mickare <2905154+mickare@users.noreply.github.com>
Date: Thu, 23 Jul 2026 02:44:34 +0900
Subject: [PATCH] chore(cicd): add minimal default permissions to workflows

---
 .github/workflows/release.yml | 7 ++++++-
 .github/workflows/test.yml    | 3 +++
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d37f06a..0a1de70 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -8,12 +8,17 @@ on:
 env:
   python_version: 3.12
 
+permissions:
+  contents: read
+
 jobs:
   release-test:
     uses: ./.github/workflows/test.yml
   release:
     runs-on: ubuntu-latest
-    concurrency: release
+    concurrency:
+      group: release
+      cancel-in-progress: false
     needs: [ release-test ]
     permissions:
       id-token: write
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 4ba18a5..a38b178 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -7,6 +7,9 @@ on:
       - main
   workflow_call:
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest