build: explicitly set permissions for workflow

Planeshifter · Planeshifter · commit 80fe486b7d5d · 2023-12-05T21:30:13.000-05:00
diff --git a/.github/workflows/markdown_tocs.yml b/.github/workflows/markdown_tocs.yml
@@ -30,6 +30,11 @@ on:
   # Allow the workflow to be manually run:
   workflow_dispatch:
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
 
diff --git a/.github/workflows/namespace_declarations.yml b/.github/workflows/namespace_declarations.yml
@@ -33,6 +33,11 @@ on:
   # Allow the workflow to be manually run:
   workflow_dispatch:
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
 
