chore: harden security settings

Signed-off-by: Claudio W <[email protected]>

Author: ovflowd

.github/workflows/translations-pr.yml

@@ -16,11 +16,7 @@ on:
       - '!i18n/locales/en.json'
 
 permissions:
-  # This permission is required by `stefanzweifel/git-auto-commit-action`
-  contents: write
   actions: read
-  # This permission is required by `thollander/actions-comment-pull-request`
-  pull-requests: write
 
 jobs:
   comment_on_translation_pr:
@@ -32,6 +28,10 @@ jobs:
     name: Comment on Translation PR
     runs-on: ubuntu-latest
 
+    permissions:
+      # This permission is required by `thollander/actions-comment-pull-request`
+      pull-requests: write
+
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
@@ -59,6 +59,10 @@ jobs:
     name: Format Crowdin Pull Request
     runs-on: ubuntu-latest
 
+    permissions:
+      # This permission is required by `stefanzweifel/git-auto-commit-action`
+      contents: write
+
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1