From 31e1c221ff1a65e3e35b068b4464c50bce6b8434 Mon Sep 17 00:00:00 2001
From: silverwind <me@silverwind.io>
Date: Tue, 31 Mar 2026 12:50:08 +0200
Subject: [PATCH] Add permissions to cron-renovate workflow

Co-Authored-By: Claude (Opus 4.6) <noreply@anthropic.com>
---
 .github/workflows/cron-renovate.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/cron-renovate.yml b/.github/workflows/cron-renovate.yml
index f2f80eb7a2..871366fdf3 100644
--- a/.github/workflows/cron-renovate.yml
+++ b/.github/workflows/cron-renovate.yml
@@ -9,6 +9,8 @@ jobs:
   cron-renovate:
     runs-on: ubuntu-latest
     if: github.repository == 'go-gitea/gitea'
+    permissions:
+      contents: read
     steps:
       - uses: actions/create-github-app-token@v1
         id: get_token