[build, test] Harden workflows' security (#5410)

[yt-dlp.git] / .github / workflows / download.yml

diff --git a/.github/workflows/download.yml b/.github/workflows/download.yml
index cc2da62fae633d6d388ecfa2fb3c4bdf7ce018a2..2b2387d4f1342529c953305e0a18301632ef7b1f 100644 (file)
--- a/.github/workflows/download.yml
+++ b/.github/workflows/download.yml
@@ -1,5 +1,8 @@
 name: Download Tests
 on: [push, pull_request]
+permissions:
+  contents: read
+
 jobs:
   quick:
     name: Quick Download Tests