From 98c9e7bb0fad34b48eeeba7da0c53af8a500a8ee Mon Sep 17 00:00:00 2001
From: Eric Eastwood <erice@element.io>
Date: Fri, 6 Mar 2026 12:02:45 -0600
Subject: [PATCH] Set `permissions`

See https://github.com/element-hq/synapse/pull/19533#pullrequestreview-3905073725
---
 .github/workflows/complement_tests.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/complement_tests.yml b/.github/workflows/complement_tests.yml
index 0469d32c94..59a0d57629 100644
--- a/.github/workflows/complement_tests.yml
+++ b/.github/workflows/complement_tests.yml
@@ -11,6 +11,11 @@ on:
         type: boolean
         default: false
 
+# Control the permissions granted to `GITHUB_TOKEN`.
+permissions:
+  # `actions/checkout` read the repository (also see
+  # https://github.com/actions/checkout/tree/de0fac2e4500dabe0009e67214ff5f5447ce83dd/#recommended-permissions)
+  contents: read
 env:
   RUST_VERSION: 1.87.0