Use read permissions by default in actions

Author: spoorcc

.github/workflows/codeql-analysis.yml

@@ -21,6 +21,9 @@ on:
   schedule:
     - cron: '24 22 * * 4'
 
+permissions:
+  contents: read
+
 jobs:
   analyze:
     name: Analyze

.github/workflows/devcontainer.yml

@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [main, dev]
 
+permissions:
+  contents: read
+
 jobs:
   devcontainer:
     name: DevContainer Build & Test

.github/workflows/docs.yml

@@ -2,6 +2,9 @@ name: "Docs"
 on:
 - pull_request
 
+permissions:
+  contents: read
+
 jobs:
   docs:
     runs-on: ubuntu-latest

.github/workflows/landing-page.yml

@@ -6,6 +6,9 @@ on:
       - main
       - feature/simplify-landing-page
 
+permissions:
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest

.github/workflows/python-publish.yml

@@ -10,6 +10,9 @@ on:
   # Allows to run this workflow manually
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   deploy:
 

.github/workflows/run.yml

@@ -7,6 +7,9 @@ on:
   pull_request:
     types: [opened, synchronize, reopened]
 
+permissions:
+  contents: read
+
 jobs:
 
   test-cygwin:

.github/workflows/test.yml

@@ -7,6 +7,9 @@ on:
   pull_request:
     types: [opened, synchronize, reopened]
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest