ci: add permissions to workflow

Author: Laure-di

.github/workflows/checks.yml

@@ -1,5 +1,4 @@
 name: Tests
-
 permissions:
   contents: read
 

.github/workflows/docs.yml

@@ -1,4 +1,6 @@
 name: Generate documentation
+permissions:
+  contents: read
 
 on:
   push:

.github/workflows/format.yml

@@ -1,5 +1,4 @@
 name: Check formatting
-
 permissions:
   contents: read
 

.github/workflows/labeler.yml

@@ -1,4 +1,7 @@
 name: "Pull Request Labeler"
+permissions:
+  actions: read
+
 on:
   - pull_request_target
 

.github/workflows/lint.yml

@@ -1,5 +1,4 @@
 name: Check linters
-
 permissions:
   contents: read
 

.github/workflows/nightly.yml

@@ -1,11 +1,11 @@
 name: Nightly Tests
+permissions:
+  actions: read
+
 on:
   schedule:
     - cron: '0 0 * * *'
 
-permissions:
-  actions: read
-
 jobs:
   nightly:
     strategy:

.github/workflows/release.yml

@@ -1,4 +1,6 @@
 name: Release
+permissions:
+  contents: read
 
 on:
   release:

.github/workflows/typing.yml

@@ -1,5 +1,4 @@
 name: Check type hinting
-
 permissions:
   contents: read