Merge pull request #2437 from oasisprotocol/mz/workflow

Add permissions to GitHub workflows

Author: buberdds

.changelog/2437.internal.md

@@ -0,0 +1 @@
+Add permissions to GitHub workflows

.github/workflows/ci-build.yml

@@ -15,6 +15,9 @@ on:
       - master
       - stable/*
 
+# Explicitly disable secrets.GITHUB_TOKEN permissions.
+permissions: {}
+
 jobs:
   build:
     # NOTE: This name appears in GitHub's Checks API.

.github/workflows/ci-lint.yml

@@ -15,6 +15,9 @@ on:
       - master
       - stable/*
 
+# Explicitly disable secrets.GITHUB_TOKEN permissions.
+permissions: {}
+
 jobs:
   lint:
     # NOTE: This name appears in GitHub's Checks API.

.github/workflows/ci-playwright.yml

@@ -15,6 +15,9 @@ on:
       - master
       - stable/*
 
+# Explicitly disable secrets.GITHUB_TOKEN permissions.
+permissions: {}
+
 jobs:
   playwright:
     # NOTE: This name appears in GitHub's Checks API.

.github/workflows/ci-test.yml

@@ -15,6 +15,9 @@ on:
       - master
       - stable/*
 
+# Explicitly disable secrets.GITHUB_TOKEN permissions.
+permissions: {}
+
 jobs:
   test:
     # NOTE: This name appears in GitHub's Checks API.