build: explicitly set permissions for workflows

Author: Planeshifter

.github/workflows/check_licenses.yml

@@ -22,6 +22,11 @@ name: check_licenses
 # Workflow triggers:
 on: [pull_request]
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
 

.github/workflows/first_time_greeting.yml

@@ -22,6 +22,11 @@ name: first_time_greeting
 # Workflow triggers:
 on: [pull_request_target, issues]
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
 

.github/workflows/lint_changed_files.yml

@@ -30,6 +30,11 @@ on:
       - synchronize
       - reopened
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
 

.github/workflows/make.yml

@@ -30,6 +30,11 @@ on:
       env:
         description: Environment variables to set.
         required: false
+        
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
 
 # Workflow jobs:
 jobs: