Merge 7fe08df into 94820ce

.github/workflows/packj.yml

@@ -5,17 +5,20 @@ name: Packj security audit
 on:
   pull_request:
     branches: main
-
-permissions:  # principle of least privilege (only code READ perms)
-  contents: read
-  pull-requests: write
-
+
+# Declare default permissions as read only.
+permissions: read-all
+
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
-
+  
   # This workflow contains a single job called "packj-audit"
   packj-security-audit:
 
+    # write perms
+    permissions:
+      pull-requests: write
+
     # The type of runner that the job will run on
     runs-on: ubuntu-latest