build: explicitly set permissions for workflows

Planeshifter · Planeshifter · commit 16f70952f7ff · 2023-12-10T22:12:15.000-05:00
diff --git a/.github/workflows/check_required_files.yml b/.github/workflows/check_required_files.yml
@@ -25,6 +25,11 @@ on:
   pull_request_target:
     types: [review_requested]
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
 
diff --git a/.github/workflows/deprecate_packages.yml b/.github/workflows/deprecate_packages.yml
@@ -30,6 +30,11 @@ on:
       message:
         description: 'Custom deprecation message:'
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow concurrency group:
 concurrency:
 
diff --git a/.github/workflows/discussion_bot_response.yml b/.github/workflows/discussion_bot_response.yml
@@ -24,6 +24,11 @@ on:
   discussion:
     types: [created]
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
   respond:
diff --git a/.github/workflows/discussion_comment_bot_response.yml b/.github/workflows/discussion_comment_bot_response.yml
@@ -24,6 +24,11 @@ on:
   discussion_comment:
     types: [created]
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
   respond:
