Declare CI workflow permissions

Author: jeffhandley

.github/workflows/ci.yml

@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: ["main"]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     strategy:

.github/workflows/code-coverage.yml

@@ -3,6 +3,9 @@ name: Code Coverage
 on:
   workflow_call:
 
+permissions:
+  contents: read
+
 jobs:
   publish-coverage:
     runs-on: ubuntu-latest

.github/workflows/markdown-link-check.yml

@@ -8,6 +8,9 @@ on:
     branches: [ "main" ]
     paths: "**.md"
 
+permissions:
+  contents: read
+
 jobs:
   markdown-link-check:
     runs-on: ubuntu-latest