From 85ef5979821df49a31a5e8e233b1cf634d39a36e Mon Sep 17 00:00:00 2001
From: MacOS <bachhofner.dev@gmail.com>
Date: Thu, 30 Jul 2026 10:14:59 +0200
Subject: [PATCH] build(engine-benchmarks): set contents permission to read on
 workflow level

---
 .github/workflows/engine-benchmarks.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/engine-benchmarks.yml b/.github/workflows/engine-benchmarks.yml
index 9a2e7533..f0f3f91a 100644
--- a/.github/workflows/engine-benchmarks.yml
+++ b/.github/workflows/engine-benchmarks.yml
@@ -34,6 +34,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+# Set contents permission to read, all others are set to none automatically
+permissions:
+  contents: read
+
 jobs:
   smoke-ubuntu-latest:
     # Smoke pack on the default GitHub runner. Goal: prove the harness +