remove stale workflow; add read permissions to GHA (#62)

macfarla · web-flow · commit d7c67ff9d3a7 · 2026-01-28T11:05:36.000+10:00
* add read permissions

Signed-off-by: Sally MacFarlane &lt;macfarla.github@gmail.com&gt;

* remove stale workflow

Signed-off-by: Sally MacFarlane &lt;macfarla.github@gmail.com&gt;

---------

Signed-off-by: Sally MacFarlane &lt;macfarla.github@gmail.com&gt;
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -23,6 +23,9 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
   assemble:
     timeout-minutes: 30
diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
@@ -23,6 +23,9 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
   checks:
     timeout-minutes: 30
diff --git a/.github/workflows/license-checks.yml b/.github/workflows/license-checks.yml
@@ -21,6 +21,9 @@ on:
     paths:
       - 'dependency-versions.gradle'
 
+permissions:
+  contents: read
+
 jobs:
   license-checks:
     timeout-minutes: 30
diff --git a/.github/workflows/mark-issues-as-stale.yml b/.github/workflows/mark-issues-as-stale.yml
diff --git a/.github/workflows/test-windows.yml b/.github/workflows/test-windows.yml
@@ -24,6 +24,9 @@ on:
     types: [opened, synchronize, reopened, labeled, unlabeled]
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
   test-windows:
     timeout-minutes: 30
