better follow my own rules

pdewilde · pdewilde · commit b8dcaeb09087 · 2025-11-17T13:48:56.000-08:00
diff --git a/.github/workflows/action_scanning.yml b/.github/workflows/action_scanning.yml
@@ -8,6 +8,10 @@ on:
     - '.github/actions/**/*.yml'
     - '.github/actions/**/*.yaml'
 
+permissions:
+  contents: 'read'
+  actions: 'write' # Upload artifact
+
 jobs:
   scan-pr:
     permissions:
