Restrict permissions of GITHUB_TOKEN

Author: marcphilipp

.github/workflows/build-all-samples.yml

@@ -7,6 +7,10 @@ on:
   pull_request:
     branches:
       - '*'
+
+permissions:
+  contents: read
+
 jobs:
   linux:
     name: Linux

.github/workflows/codeql.yml

@@ -6,6 +6,9 @@ on:
   schedule:
     - cron: '23 2 * * 4'
 
+permissions:
+  contents: read
+
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})

.github/workflows/gradle-wrapper-validation.yml

@@ -7,6 +7,10 @@ on:
   pull_request:
     branches:
       - '*'
+
+permissions:
+  contents: read
+
 jobs:
   validation:
     name: "Validation"

.github/workflows/nohttp.yml

@@ -8,6 +8,10 @@ on:
   pull_request:
     branches:
       - '*'
+
+permissions:
+  contents: read
+
 jobs:
   nohttp:
     runs-on: ubuntu-latest