From c5e506be156e191e122bb9bd3bc2640b5f3400a0 Mon Sep 17 00:00:00 2001
From: mutantmonkey <hello@mutantmonkey.mx>
Date: Sat, 19 Sep 2026 18:37:41 -0700
Subject: [PATCH] Lock down namcap permissions

---
 .github/workflows/namcap.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/namcap.yml b/.github/workflows/namcap.yml
index 5c108116..876acc0e 100644
--- a/.github/workflows/namcap.yml
+++ b/.github/workflows/namcap.yml
@@ -5,15 +5,17 @@ on:
       - '.github/workflows/**'
       - 'keyring.asc'
   workflow_dispatch:
-permissions:
-  contents: read
 
 jobs:
   check:
     name: Check
     runs-on: ubuntu-26.04
+    permissions:
+      contents: read
     steps:
     - name: Checkout repository
       uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      with:
+        persist-credentials: false
     - name: Check all PKGBUILDs using namcap
       uses: mutantmonkey/geschenkerbauer/actions/namcap@c00c7f432884cbd0aee710135261383886064588 # main
-- 
2.51.2