chore: GH workflow permissions (#59)

Author: jkowalleck

.github/workflows/build_docs.yml

@@ -8,6 +8,9 @@ on:
 env:
   PYTHON_VERSION_DEFAULT: "3.10"
 
+# https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/controlling-permissions-for-github_token
+permissions: {}
+
 jobs:
   docs_json:
     runs-on: ubuntu-latest

.github/workflows/validate_tools_json.yml

@@ -7,7 +7,8 @@ on:
     paths: [ "tools.json", "tools.schema.json", ".github/workflows/validate_tools_json.yml" ]
   workflow_dispatch:
 
-permissions: read-all
+# https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/controlling-permissions-for-github_token
+permissions: {}
 
 jobs:
   validate: