See if this fixes the check permissions…

Author: tomatrow

.github/workflows/check.yml

@@ -5,13 +5,17 @@ on:
   pull_request:
     branches: ["main"]
 
+permissions:
+  contents: read
+
 concurrency:
   group: "check-${{ github.head_ref }}"
   cancel-in-progress: true
 
 jobs:
   check:
     runs-on: ubuntu-latest
+    permissions: {}
     env:
       NEXT_PUBLIC_SUPABASE_URL: ${{ vars.NEXT_PUBLIC_SUPABASE_URL }}
       NEXT_PUBLIC_SUPABASE_ANON_KEY: ${{ vars.NEXT_PUBLIC_SUPABASE_ANON_KEY }}
@@ -23,7 +27,7 @@ jobs:
         with:
           bun-version: latest
       - name: Install dependencies
-        run: bun install
+        run: bun install --frozen-lockfile
       - name: Lint
         run: bun run lint
       - name: Type check