From 7100343d17de9f19247dd87054ca9dc512a3288a Mon Sep 17 00:00:00 2001
From: project516 <138796702+Project516@users.noreply.github.com>
Date: Mon, 20 Apr 2026 18:15:01 -0500
Subject: [PATCH] Limit main.yml to only read permissions

---
 .github/workflows/main.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index d1567b9..41a71d7 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -18,6 +18,8 @@ jobs:
   build:
     # The type of runner that the job will run on
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
 
     # This grabs the WPILib docker container
     container: wpilib/roborio-cross-ubuntu:2025-24.04