Merge pull request kubernetes-sigs#1349 from kubernetes-sigs/cpanato-patch-1

update gh permissions

Author: k8s-ci-robot

.github/workflows/codespell.yml

@@ -4,6 +4,8 @@ name: Codespell
 on:
   pull_request:
 
+permissions: {}
+
 jobs:
   codespell:
     runs-on: ubuntu-latest
@@ -16,4 +18,3 @@ jobs:
           ignore_words_file: .codespellignore
           check_filenames: true
           check_hidden: true
-

.github/workflows/link-check.yml

@@ -10,6 +10,8 @@ on:
   pull_request:
     paths: "docs/**"
 
+permissions: {}
+
 jobs:
   lint_docs:
     name: Broken Links

.github/workflows/lint.yml

@@ -3,14 +3,16 @@ name: Lint
 on:
   pull_request:
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   golangci:
     name: lint
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: read
+
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2