From a85c48117f9b75c5a24a464282d3d01e276eef95 Mon Sep 17 00:00:00 2001
From: Call Telemetry <57885211+calltelemetry-jason@users.noreply.github.com>
Date: Mon, 1 Jun 2026 11:52:35 -0500
Subject: [PATCH] ci: add top-level permissions: {} to dependabot-automerge
 (least privilege)

---
 .github/workflows/dependabot-automerge.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml
index 80c9994..cdc0671 100644
--- a/.github/workflows/dependabot-automerge.yml
+++ b/.github/workflows/dependabot-automerge.yml
@@ -11,6 +11,8 @@ concurrency:
   group: dependabot-automerge-${{ github.event.pull_request.number }}
   cancel-in-progress: false
 
+
+permissions: {}
 jobs:
   dependabot:
     name: Auto-merge Dependabot patch/minor PRs