Potential fix for code scanning alert no. 12: Workflow does not contain permissions

[smorin]

Potential fix for https://github.com/smorin/thothspinner/security/code-scanning/12

Add an explicit top-level permissions block in .github/workflows/ci.yml right after the on: trigger section (before jobs:).
For this workflow, the best minimal non-breaking setting is:

• permissions:
  • contents: read

Why this is best here:

• All shown jobs are CI checks/linting/type-checking and only need repository read access for actions/checkout.
• A workflow-level block fixes the reported issue for all jobs at once, including file-hygiene, without changing job behavior.
• If a future job needs elevated scopes, it can override permissions at that job only.

No imports, methods, or dependencies are needed.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[Copilot]

Pull request overview

Adds an explicit minimal GitHub Actions token permission configuration to address code scanning alert #12 by defining workflow-level permissions for the CI workflow.

Changes:

• Add a top-level permissions block to .github/workflows/ci.yml.
• Set contents: read to ensure least-privilege access for actions/checkout and other read-only CI steps.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.