ci: declare workflow-level contents: read on 1 workflows
#784
+3
−0
contents: read on 1 workflows
#784