Merge pull request #342 from 10up/fix/workflow-perms

Fix/workflow perms

Author: dkotter

.github/workflows/build-release-zip.yml

@@ -1,5 +1,8 @@
 name: Build release zip
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
   workflow_call:

.github/workflows/cypress.yml

@@ -1,5 +1,9 @@
 name: E2E Test
 
+permissions:
+  contents: read
+  pull-requests: write
+
 on:
   push:
     branches:

.github/workflows/php-compatibility.yml

@@ -1,5 +1,8 @@
 name: PHP Compatibility
 
+permissions:
+  contents: read
+
 env:
   COMPOSER_VERSION: "2"
   COMPOSER_CACHE: "${{ github.workspace }}/.composer-cache"

.github/workflows/phpcs.yml

@@ -1,5 +1,8 @@
 name: PHPCS
 
+permissions:
+  contents: read
+
 on:
   push:
     branches:

.github/workflows/phpunit.yml

@@ -1,5 +1,8 @@
 name: Unit Tests
 
+permissions:
+  contents: read
+
 env:
   COMPOSER_VERSION: "2"
   COMPOSER_CACHE: "${{ github.workspace }}/.composer-cache"

.github/workflows/push-asset-readme-update.yml

@@ -5,6 +5,9 @@ on:
     branches:
     - trunk
 
+permissions:
+  contents: read
+
 jobs:
   trunk:
     name: Push to trunk

.github/workflows/push-deploy.yml

@@ -1,5 +1,10 @@
 name: Deploy to WordPress.org
 
+permissions:
+  contents: read
+  packages: read
+  actions: write
+
 on:
   release:
     types: [published]

.github/workflows/repo-automator.yml

@@ -1,5 +1,9 @@
 name: 'Repo Automator'
 
+permissions:
+  contents: read
+  issues: write
+
 on:
   issues:
     types: