fix/permissions

Author: europanite

.github/workflows/ci.yml

@@ -11,6 +11,9 @@ concurrency:
 jobs:
   build-test-images:
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
+      actions: write
     strategy:
       fail-fast: false
       matrix:
@@ -36,6 +39,9 @@ jobs:
           path: service-test.tar.gz
   service-tests:
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
+      actions: write
     strategy:
       fail-fast: false
       matrix:

.github/workflows/lint.yml

@@ -11,6 +11,9 @@ jobs:
   lint:
     name: Python ${{ matrix.python-version }} • ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
+      actions: write
     strategy:
       fail-fast: false
       matrix:

.github/workflows/pytest.yml

@@ -12,6 +12,9 @@ jobs:
   tests:
     name: pytest - ${{ matrix.os }} - py${{ matrix.python-version }}
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
+      actions: write
     strategy:
       fail-fast: false
       matrix: