Tighten some workflow permissions.

Author: johnbillion

.github/workflows/deploy.yml

@@ -5,6 +5,8 @@ on:
   release:
     types: [published]
 
+permissions: {}
+
 jobs:
   vsce:
     name: VS Code Marketplace
@@ -13,6 +15,8 @@ jobs:
     environment:
       name: VS Code Marketplace
       url: https://marketplace.visualstudio.com/items?itemName=johnbillion.vscode-wordpress-hooks
+    permissions:
+      contents: read
     env:
       VSCE_PAT: ${{ secrets.VSCE_TOKEN }}
     steps:

.github/workflows/test.yml

@@ -6,12 +6,16 @@ on:
   push:
   pull_request:
 
+permissions: {}
+
 jobs:
   test:
     if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name != github.repository
     name: Linter
     runs-on: ubuntu-latest
     timeout-minutes: 10
+    permissions:
+      contents: read
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4