From 6b7641b08b24158dcafccbf78f5383a8014afce6 Mon Sep 17 00:00:00 2001
From: GrantBirki <grant.birkinbine@gmail.com>
Date: Wed, 16 Apr 2025 22:30:05 -0700
Subject: [PATCH] permission hardening

---
 .github/workflows/release.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 704f7ac..632c143 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -53,6 +53,7 @@ jobs:
       artifact-path: "."
 
   verify:
+    permissions: {}
     needs: [release, sign]
     uses: github/salsa/.github/workflows/verify.yml@main
     with: