🌉 federation-bridge.yml: 添加 permissions 限制 GITHUB_TOKEN 权限

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com> Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/be54ebf1-0ab1-421d-9f24-e7cb76219d38
2026-03-21 12:49:35 +00:00 · 2026-03-21 12:49:35 +00:00 · 7113442fe5
parent 01015dde7f
commit 7113442fe5
1 changed files with 2 additions and 0 deletions
--- a/.github/workflows/federation-bridge.yml
+++ b/.github/workflows/federation-bridge.yml
@ -31,6 +31,8 @@ jobs:
  bridge:
    name: "🌉 桥接执行"
    runs-on: ubuntu-latest
+    permissions:
+      contents: read
    steps:
      - uses: actions/checkout@v4