Merge pull request #39 from UncleGrumpy/code_scan_alerts

Add missing permissions to workflows

Author: UncleGrumpy

.github/workflows/check-formatting.yaml

@@ -23,7 +23,11 @@ jobs:
   format-check:
     runs-on: ubuntu-24.04
     container: erlang:28
+    permissions:
+      contents: read
+
     steps:
+
     - name: "Install deps"
       run: |
         apt install -y git
@@ -35,7 +39,8 @@ jobs:
         cd erlfmt
         rebar3 as release escriptize
 
-    - uses: actions/checkout@v4
+    - name: "Checkout code"
+      uses: actions/checkout@v5
 
     - name: "Check formatting with erlfmt"
       run: |

.github/workflows/reuse-lint.yaml

@@ -13,7 +13,10 @@ concurrency:
 jobs:
   test:
     runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - name: REUSE Compliance Check
       uses: fsfe/reuse-action@bb774aa972c2a89ff34781233d275075cbddf542