Merge pull request #6431

Author: therealdwright

.github/workflows/ci.yml

@@ -10,6 +10,10 @@ on:
 
   workflow_dispatch:
 
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   unit-test:
     runs-on: ubuntu-latest

.github/workflows/codeql.yaml

@@ -8,15 +8,16 @@ on:
   schedule:
     - cron: '43 11 * * 5'
 
+permissions:
+  security-events: write
+  actions: read
+  contents: read
+
 jobs:
   analyze:
     name: Analyze
     runs-on: 'ubuntu-latest'
     timeout-minutes: 30
-    permissions:
-      security-events: write
-      actions: read
-      contents: read
 
     strategy:
       fail-fast: false

.github/workflows/publish.yml

@@ -5,6 +5,9 @@ on:
   #   branches:
   #     - master
 
+permissions:
+  contents: write
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}