ci: scope down GitHub Token permissions (#232)

* ci: scope down permissions for makefile-test.yaml

* ci: scope down permissions for summarize-test.yaml

* ci: scope down permissions for publish.yaml

Author: AdnaneKhan

.github/workflows/makefile-test.yaml

@@ -5,6 +5,9 @@ on:
   push:
     branches: [ master ]
 
+permissions:
+  contents: read
+
 jobs:
   run-tests:
     if: "!contains(github.event.pull_request.labels.*.name, 'no-test')"

.github/workflows/publish.yaml

@@ -7,6 +7,10 @@ on:
     branches:
       - 'documentation'
 
+permissions:
+  contents: write
+  pages: write
+
 jobs:
   publish:
     runs-on: macos-latest

.github/workflows/summarize-test.yaml

@@ -5,6 +5,9 @@ on:
   push:
     branches: [ master ]
 
+permissions:
+  contents: read
+
 jobs:
   run-tests:
     if: "!contains(github.event.pull_request.labels.*.name, 'no-test')"