Fix workflow permissions

See gh-1627

Author: snicoll

.github/workflows/build-and-deploy-snapshot.yml

@@ -3,6 +3,8 @@ on:
   push:
     branches:
       - '4.0.x'
+permissions:
+  contents: read
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
 jobs:

.github/workflows/ci.yml

@@ -3,6 +3,8 @@ on:
   push:
     branches:
       - '4.0.x'
+permissions:
+  contents: read
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
 jobs:

.github/workflows/release.yml

@@ -3,6 +3,8 @@ on:
   push:
     tags:
       - v4.0.[0-9]+
+permissions:
+  contents: read
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
 jobs:

.github/workflows/verify.yml

@@ -24,6 +24,8 @@ on:
       token:
         description: 'Token to use for authentication with GitHub'
         required: true
+permissions:
+  contents: read
 jobs:
   verify:
     name: Verify