ci: fix pipeline permissions (#220)

Signed-off-by: Kim Oliver Drechsel <[email protected]>

Author: kimdre

.github/workflows/cleanup_zones.yaml

@@ -1,9 +1,13 @@
 name: "Cleanup DNS Zones"
+
 on:
   workflow_dispatch:
   schedule:
     - cron: "0 0 * * *"
 
+permissions:
+  contents: read
+
 jobs:
   cleanup:
     runs-on: ubuntu-latest

.github/workflows/spelling.yaml

@@ -1,6 +1,5 @@
 name: Spell checking
 
-# Trigger on pull requests, and pushes to master branch.
 on:
   push:
     branches:
@@ -9,6 +8,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   codespell:
     name: Check for spelling errors