use read permissions by default

This is needed for private repositories that can not be read publically.

Author: splitbrain

.github/workflows/cs.yml

@@ -2,7 +2,9 @@ name: PHP Code Style
 
 on: [ workflow_call ]
 
-permissions: {}
+permissions:
+  contents: read
+  pull-requests: read
 
 jobs:
   phpcs:

.github/workflows/matrix.yml

@@ -13,7 +13,9 @@ on:
         description: 'The minimum PHP version supported'
         value: ${{ jobs.create-matrix.outputs.minphp }}
 
-permissions: { }
+permissions:
+  contents: read
+  pull-requests: read
 
 jobs:
   create-matrix:

.github/workflows/test.yml

@@ -9,7 +9,9 @@ on:
         type: string
         default: '{"php-version": ["7.4", "8.0", "8.1", "8.2"], "dokuwiki-branch": ["master", "stable"]}'
 
-permissions: {}
+permissions:
+  contents: read
+  pull-requests: read
 
 jobs:
   test: