From 58388b8d700a5cea52d2711c5684abddf200bc6e Mon Sep 17 00:00:00 2001
From: Daniel Carbone <daniel.p.carbone@gmail.com>
Date: Fri, 19 Sep 2025 12:16:25 -0500
Subject: [PATCH] limiting permissions (#23)

* limiting permissions

* also adding concurrency
---
 .github/workflows/tests.yaml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index c4fb853..4432e34 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -18,6 +18,26 @@ on:
     branches:
       - main
 
+permissions:
+  actions: none
+  attestations: none
+  checks: none
+  contents: read
+  deployments: none
+  id-token: none
+  issues: none
+  models: none
+  discussions: none
+  packages: none
+  pages: none
+  pull-requests: none
+  security-events: none
+  statuses: none
+
+concurrency:
+  group: '${{ github.workflow }}-${{ github.ref }}'
+  cancel-in-progress: true
+
 jobs:
   test-linux:
     strategy: