[Security campaign tracking] Fix workflow permissions

[github-campaigns]

A new security campaign has been created in your repository. This issue has been automatically created to help you and your team plan and discuss how to fix the alerts in the campaign and reduce your security risk.

[Security campaign] Fix workflow permissions

Description
Fix workflow permissions

Due Date
Feb 28, 2026

Campaign manager

• @smoneyan

[github-campaigns]

This campaign was due on Feb 27, 2026. There is currently 1 open alert.

You can take action by:

• mitigating the remaining vulnerabilities in the security campaign.
• asking a campaign manager to extend the due date.