ci: set contents read as default workflow permissions (#494) #1

	name: test

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
	permissions:
	contents: read

	on:
	push:
	branches:
	- 'master'
	- 'releases/v*'
	pull_request:

	jobs:
	test:
	runs-on: ubuntu-latest
	steps:
	-
	name: Checkout
	uses: actions/checkout@v4
	with:
	fetch-depth: 0
	-
	name: Test
	uses: docker/bake-action@v6
	with:
	source: .
	targets: test
	-
	name: Upload coverage
	uses: codecov/codecov-action@v5
	with:
	files: ./coverage/clover.xml