From c3501539e617d2946976f658adf7d258272e16c0 Mon Sep 17 00:00:00 2001
From: Collin Barrett <6483057+collinbarrett@users.noreply.github.com>
Date: Fri, 13 Jun 2025 21:47:46 -0500
Subject: [PATCH] refactor(api): explicit read permission

---
 .github/workflows/directory.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/directory.yml b/.github/workflows/directory.yml
index a6f8cb3fe..c69a69b01 100644
--- a/.github/workflows/directory.yml
+++ b/.github/workflows/directory.yml
@@ -32,6 +32,7 @@ jobs:
     runs-on: ubuntu-latest
 
     permissions:
+      contents: read
       packages: write
 
     steps:
@@ -40,7 +41,7 @@ jobs:
 
       - name: Setup .NET
         uses: actions/setup-dotnet@v4
-            
+
       - name: Build
         run: dotnet build -c Release
         working-directory: ./services/Directory/FilterLists.Directory.Api
@@ -89,4 +90,4 @@ jobs:
         with:
           app-name: ${{ env.AZURE_WEBAPP_NAME }}
           publish-profile: ${{ secrets.AZURE_WEBAPP_PUBLISH_PROFILE_APP_FILTERLISTS_DIRECTORY_PROD }}
-          images: ${{ env.CONTAINER_REGISTRY }}/${{ env.CONTAINER_REPOSITORY }}:${{ env.CONTAINER_IMAGE_TAG_UNIQUE }}
\ No newline at end of file
+          images: ${{ env.CONTAINER_REGISTRY }}/${{ env.CONTAINER_REPOSITORY }}:${{ env.CONTAINER_IMAGE_TAG_UNIQUE }}