Merge pull request #4677 from sashashura/patch-1

GitHub Workflows security hardening

Author: tabacitu

.github/workflows/add-to-project.yml

@@ -9,6 +9,7 @@ on:
     types:
       - opened
 
+permissions: {}
 jobs:
   add-to-project:
     name: Add new bugs and PRs to This Week project

.github/workflows/testing.yml

@@ -5,6 +5,9 @@ on:
     schedule:
         - cron: '0 0 * * *'
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
     test:
         runs-on: ubuntu-latest