From 7a3dde2c7df299dc98cbe9c8fa79fd1faf03377b Mon Sep 17 00:00:00 2001
From: Xi Xu <i@xi-xu.me>
Date: Sun, 14 Jun 2026 20:01:54 +0800
Subject: [PATCH] fix: address code scanning alerts

---
 .github/workflows/build-and-publish.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/build-and-publish.yml b/.github/workflows/build-and-publish.yml
index d2e22e7..1ec7d87 100644
--- a/.github/workflows/build-and-publish.yml
+++ b/.github/workflows/build-and-publish.yml
@@ -5,6 +5,9 @@ on:
   schedule:
     - cron: "20 2,6,10,14,18,22 * * *"
 
+permissions:
+  contents: write
+
 jobs:
   build-and-publish-universal-rulesets:
     runs-on: ubuntu-latest