Lower permissions of the workflows.

Author: dlemstra

.github/workflows/codeql-analysis.yml

@@ -8,13 +8,16 @@ on:
     paths:
     - '.github/workflows/codeql-analysis.yml'
 
-name: codeql analysis
+name: Codeql analysis
+permissions:
+  contents: read
 jobs:
   scan_linux:
     name: Linux Q${{matrix.quantum}}-x64 hdri=${{matrix.hdri}} (${{matrix.modules}})
     runs-on: ubuntu-24.04
 
     permissions:
+      contents: read
       security-events: write
 
     strategy:

.github/workflows/daily.yml

@@ -13,7 +13,9 @@ on:
     paths:
     - '.github/workflows/daily.yml'
 
-name: daily
+name: Daily
+permissions:
+  contents: read
 jobs:
   change_log:
     name: 'Create ChangeLog.md'

.github/workflows/main.yml

@@ -8,7 +8,9 @@ on:
     branches:
     - main
 
-name: main
+name: Main
+permissions:
+  contents: read
 jobs:
   build_linux:
     name: Build Linux

.github/workflows/windows-release.yml

@@ -15,7 +15,9 @@ on:
     paths:
     - '.github/workflows/windows-release.yml'
 
-name: windows release
+name: Windows release
+permissions:
+  contents: read
 jobs:
   change_log:
     name: Create ChangeLog.md