build: explicitly set permissions for workflows

Planeshifter · Planeshifter · commit 5bb9509db0c4 · 2023-12-10T22:19:59.000-05:00
diff --git a/.github/workflows/linux_benchmark.yml b/.github/workflows/linux_benchmark.yml
@@ -39,6 +39,11 @@ concurrency:
   # Specify whether to cancel any currently running workflow in the same concurrency group:
   cancel-in-progress: true
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
 
diff --git a/.github/workflows/linux_examples.yml b/.github/workflows/linux_examples.yml
@@ -39,6 +39,11 @@ concurrency:
   # Specify whether to cancel any currently running workflow in the same concurrency group:
   cancel-in-progress: true
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
 
diff --git a/.github/workflows/linux_test.yml b/.github/workflows/linux_test.yml
@@ -37,6 +37,11 @@ concurrency:
   # Specify whether to cancel any currently running workflow in the same concurrency group:
   cancel-in-progress: true
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
 
diff --git a/.github/workflows/linux_test_cov.yml b/.github/workflows/linux_test_cov.yml
@@ -39,6 +39,11 @@ concurrency:
   # Specify whether to cancel any currently running workflow in the same concurrency group:
   cancel-in-progress: true
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
 
diff --git a/.github/workflows/linux_test_install.yml b/.github/workflows/linux_test_install.yml
@@ -37,6 +37,11 @@ concurrency:
   # Specify whether to cancel any currently running workflow in the same concurrency group:
   cancel-in-progress: true
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
 
