add permissions on workflows files

Author: Emmanuel Campait

.github/workflows/phpstan.yml

@@ -9,6 +9,9 @@ on:
       - main
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   phpstan:
     runs-on: ubuntu-latest
@@ -27,5 +30,8 @@ jobs:
       - name: Install dependencies
         run: composer install --no-interaction --prefer-dist
 
+      - name: Prepare PHPStan temp directory
+        run: mkdir -p build build/phpstan-tmp
+
       - name: Run PHPStan
         run: vendor/bin/phpstan analyse -c phpstan.neon.dist --memory-limit=512M

.github/workflows/phpunit.yml

@@ -9,6 +9,9 @@ on:
       - main
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   phpunit:
     runs-on: ubuntu-latest

.github/workflows/psalm.yml

@@ -9,6 +9,9 @@ on:
       - main
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   psalm:
     runs-on: ubuntu-latest