From c00ac13feed618a5672e1b68a90f4f64ba73a7db Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 15 Apr 2026 11:45:14 +0000
Subject: [PATCH] libllama-abi-check: add explicit read-only permissions to
 workflow job

Agent-Logs-Url: https://github.com/ggml-org/llama.cpp/sessions/e9059c50-ffff-4233-a16d-13a7214f7b98

Co-authored-by: ggerganov <1991296+ggerganov@users.noreply.github.com>
---
 .github/workflows/libllama-abi-check.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/libllama-abi-check.yml b/.github/workflows/libllama-abi-check.yml
index 102707ca83..daf44804c8 100644
--- a/.github/workflows/libllama-abi-check.yml
+++ b/.github/workflows/libllama-abi-check.yml
@@ -34,6 +34,8 @@ concurrency:
 jobs:
   abi-check:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
 
     steps:
       - name: Checkout