Commit b70af4d5 for xz

commit b70af4d5320750acda7cffbd75a3390eede600bd
Author: Lasse Collin <lasse.collin@tukaani.org>
Date:   Wed Jun 17 16:02:45 2026 +0300

    CI: Add 'permissions' to coverity.yml

    GitHub's actions/checkout@v6 is documented to need 'contents: read' but
    it works without it too, probably because the repository is public.

    Reported-by: GitHub user Alb3e3
    Fixes: https://github.com/tukaani-project/xz/pull/230

diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
index 579ac559..7e829ab9 100644
--- a/.github/workflows/coverity.yml
+++ b/.github/workflows/coverity.yml
@@ -8,6 +8,8 @@ on:
   push:
     branches: [coverity_scan]

+permissions: {}
+
 jobs:
   coverity:
     runs-on: ubuntu-latest