From 004424cc2bceb9b09e1ed75455b6921cc6a6d035 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 27 Jul 2026 12:23:06 +0000
Subject: [PATCH] Address validation feedback for Nix test and workflow
 permissions

---
 .github/workflows/nix-wallet-connections-validation.yml | 3 +++
 nix/tests/nwc-wallets-port-collision.nix                | 4 ++--
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/nix-wallet-connections-validation.yml b/.github/workflows/nix-wallet-connections-validation.yml
index 22f04e2..ecc6201 100644
--- a/.github/workflows/nix-wallet-connections-validation.yml
+++ b/.github/workflows/nix-wallet-connections-validation.yml
@@ -5,6 +5,9 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
   validate:
     runs-on: ubuntu-latest
diff --git a/nix/tests/nwc-wallets-port-collision.nix b/nix/tests/nwc-wallets-port-collision.nix
index e613a70..cb86a3e 100644
--- a/nix/tests/nwc-wallets-port-collision.nix
+++ b/nix/tests/nwc-wallets-port-collision.nix
@@ -118,8 +118,8 @@ pkgs.testers.runNixOSTest {
     machine.succeed("ss -ltn '( sport = :18080 )' | grep -F '127.0.0.1:18080'")
     machine.succeed("ss -ltn '( sport = :8181 )' | grep -F '127.0.0.1:8181'")
 
-    machine.fail("ss -ltn '( sport = :18080 )' | grep -E '0\\\\.0\\\\.0\\\\.0:18080|\\[::\\]:18080'")
-    machine.fail("ss -ltn '( sport = :8181 )' | grep -E '0\\\\.0\\\\.0\\\\.0:8181|\\[::\\]:8181'")
+    machine.fail("ss -ltn '( sport = :18080 )' | grep -E '0\\.0\\.0\\.0:18080|\\[::\\]:18080'")
+    machine.fail("ss -ltn '( sport = :8181 )' | grep -E '0\\.0\\.0\\.0:8181|\\[::\\]:8181'")
 
     machine.succeed("${pkgs.curl}/bin/curl --fail --silent http://127.0.0.1:18080/api/info | ${pkgs.gnugrep}/bin/grep -q 'setupCompleted'")