CI: restrict permissions

Author: lucascolley

Diff for: .github/workflows/cd.yml

@@ -1,5 +1,8 @@
 name: CD
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
   pull_request:

Diff for: .github/workflows/ci.yml

@@ -1,5 +1,8 @@
 name: CI
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
   pull_request:

Diff for: .github/workflows/docs-build.yml

@@ -1,5 +1,8 @@
 name: Docs Build
 
+permissions:
+  contents: read
+
 on: [push, pull_request]
 
 jobs:

Diff for: .github/workflows/docs-deploy.yml

@@ -1,5 +1,8 @@
 name: Docs Deploy
 
+permissions:
+  contents: read
+
 on:
   workflow_run:
     workflows: ["Docs Build"]