build: explicitly set permissions for workflows

Planeshifter · Planeshifter · commit 670306a96291 · 2023-12-10T22:18:11.000-05:00
diff --git a/.github/workflows/lint_random_files.yml b/.github/workflows/lint_random_files.yml
@@ -68,6 +68,11 @@ on:
   schedule:
     - cron: '0 0 * * *'
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
 
diff --git a/.github/workflows/npm_downloads.yml b/.github/workflows/npm_downloads.yml
@@ -29,6 +29,11 @@ on:
   # Allow the workflow to be manually run:
   workflow_dispatch:
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
 
