Merge pull request #940 from alphagov/add-gh-permissions

chore: 🤖 add explicit permissions

Author: jaskaransarkaria

.github/workflows/actionlint.yml

@@ -4,6 +4,8 @@ on:
     paths: ['.github/**']
 jobs:
   actionlint:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1

.github/workflows/ci.yml

@@ -7,6 +7,8 @@ concurrency:
 
 jobs:
   test:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1