From cc11ebd31333c6e35221bd9637e4104a1e2f6150 Mon Sep 17 00:00:00 2001
From: Timothy Liu <liuxf19@163.com>
Date: Sun, 30 Aug 2026 02:13:45 +0800
Subject: [PATCH] ci(permit): :bug: add missing permissions

---
 .github/workflows/build-gh-pages.yml         | 24 ++++++++++++--------
 .github/workflows/build-source.yml           | 23 +++++++++++--------
 .github/workflows/test-01-basic.yml          |  3 +++
 .github/workflows/test-02-multithreading.yml |  3 +++
 .github/workflows/test-03-async-grpc.yml     |  3 +++
 .github/workflows/test-04-avalonia.yml       |  3 +++
 .github/workflows/test-05-advanced.yml       |  3 +++
 7 files changed, 42 insertions(+), 20 deletions(-)

diff --git a/.github/workflows/build-gh-pages.yml b/.github/workflows/build-gh-pages.yml
index e4d98ec..31aa4cf 100644
--- a/.github/workflows/build-gh-pages.yml
+++ b/.github/workflows/build-gh-pages.yml
@@ -1,17 +1,21 @@
 name: build-gh-pages
 
-on:
-  pull_request:
-    branches: [dev, main, gh-pages]
-    paths-ignore:
-      - "src/**"
+on:
+  pull_request:
+    branches: [dev, main, gh-pages]
+    paths-ignore:
+      - "src/**"
   push:
     branches: [dev, main, gh-pages]
-    paths-ignore:
-      - "src/**"
-
-jobs:
-  build:
+    paths-ignore:
+      - "src/**"
+
+permissions:
+  contents: read
+  pages: read
+
+jobs:
+  build:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
diff --git a/.github/workflows/build-source.yml b/.github/workflows/build-source.yml
index 032faeb..297e1c6 100644
--- a/.github/workflows/build-source.yml
+++ b/.github/workflows/build-source.yml
@@ -1,17 +1,20 @@
 name: build-source
 
-on:
-  pull_request:
-    branches: [dev, main]
-    paths:
-      - "src/**"
+on:
+  pull_request:
+    branches: [dev, main]
+    paths:
+      - "src/**"
   push:
     branches: [dev, main]
-    paths:
-      - "src/**"
-
-jobs:
-  build:
+    paths:
+      - "src/**"
+
+permissions:
+  contents: read
+
+jobs:
+  build:
     runs-on: windows-latest
     steps:
       - uses: actions/checkout@v7
diff --git a/.github/workflows/test-01-basic.yml b/.github/workflows/test-01-basic.yml
index 3a74b97..b23ece6 100644
--- a/.github/workflows/test-01-basic.yml
+++ b/.github/workflows/test-01-basic.yml
@@ -3,6 +3,9 @@ on:
   pull_request:
     branches: [homework/01-basic]
 
+permissions:
+  contents: read
+
 jobs:
   test-01-basic:
     if: true
diff --git a/.github/workflows/test-02-multithreading.yml b/.github/workflows/test-02-multithreading.yml
index 08c076b..ac04e29 100644
--- a/.github/workflows/test-02-multithreading.yml
+++ b/.github/workflows/test-02-multithreading.yml
@@ -3,6 +3,9 @@ on:
   pull_request:
     branches: [homework/02-multithreading]
 
+permissions:
+  contents: read
+
 jobs:
   test-02-multithreading:
     if: true
diff --git a/.github/workflows/test-03-async-grpc.yml b/.github/workflows/test-03-async-grpc.yml
index 0a4a612..a19f618 100644
--- a/.github/workflows/test-03-async-grpc.yml
+++ b/.github/workflows/test-03-async-grpc.yml
@@ -3,6 +3,9 @@ on:
   pull_request:
     branches: [homework/03-async-grpc]
 
+permissions:
+  contents: read
+
 jobs:
   test-03-async-grpc:
     if: true
diff --git a/.github/workflows/test-04-avalonia.yml b/.github/workflows/test-04-avalonia.yml
index 7568748..7336287 100644
--- a/.github/workflows/test-04-avalonia.yml
+++ b/.github/workflows/test-04-avalonia.yml
@@ -3,6 +3,9 @@ on:
   pull_request:
     branches: [homework/04-avalonia]
 
+permissions:
+  contents: read
+
 jobs:
   test-04-avalonia:
     if: true
diff --git a/.github/workflows/test-05-advanced.yml b/.github/workflows/test-05-advanced.yml
index 7dcf846..2028d6c 100644
--- a/.github/workflows/test-05-advanced.yml
+++ b/.github/workflows/test-05-advanced.yml
@@ -3,6 +3,9 @@ on:
   pull_request:
     branches: [homework/05-advanced]
 
+permissions:
+  contents: read
+
 jobs:
   test-05-advanced:
     if: true