Uses explicit permissions #498

	name: python lint
	on:
	push:
	pull_request:
	types: [opened, synchronize, reopened, ready_for_review]
	permissions:
	contents: read
	jobs:
	python-lint:
	runs-on: ubuntu-latest
	steps:
	- name: git clone
	uses: actions/checkout@v4

	- name: set up Python
	uses: actions/setup-python@v5
	with:
	python-version: 3.13

	- name: install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install -r requirements.txt

	- name: lint with ruff
	run: ruff check --output-format=github -v .

Navigation Menu