From d1b7f7d528fc5f1c0cbb7baf5326173983afa386 Mon Sep 17 00:00:00 2001
From: Linus G Thiel <linus@yesbabyyes.se>
Date: Mon, 1 Dec 2025 17:35:29 +0100
Subject: [PATCH] Potential fix for code scanning alert no. 5: Workflow does
 not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
---
 .github/workflows/npm.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/npm.yml b/.github/workflows/npm.yml
index 37b9499..59b7931 100644
--- a/.github/workflows/npm.yml
+++ b/.github/workflows/npm.yml
@@ -1,4 +1,6 @@
 name: NPM
+permissions:
+  contents: read
 on:
   release:
     types: [created]