From 9219933b604a71f7153c49f4d851ae55ea22a696 Mon Sep 17 00:00:00 2001
From: Ilia Kats <ilia-kats@gmx.net>
Date: Mon, 2 Mar 2026 17:17:47 +0100
Subject: [PATCH] add contents:read permission to test workflow

otherwise it fails on private repos
---
 {{cookiecutter.project_name}}/.github/workflows/test.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/{{cookiecutter.project_name}}/.github/workflows/test.yaml b/{{cookiecutter.project_name}}/.github/workflows/test.yaml
index 986686df..07076813 100644
--- a/{{cookiecutter.project_name}}/.github/workflows/test.yaml
+++ b/{{cookiecutter.project_name}}/.github/workflows/test.yaml
@@ -48,6 +48,7 @@ jobs:
     needs: get-environments
     permissions:
        id-token: write  # for codecov OIDC
+       contents: read
 
     strategy:
       fail-fast: false