set least privilege

Author: soumeh01

.github/workflows/ci.yml

@@ -16,8 +16,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
-# Declare default permissions as read only
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   build:

.github/workflows/codeql.yml

@@ -8,8 +8,8 @@ on:
     branches:
       - main
 
-# Declare default permissions as read only
-permissions: read-all
+permissions:
+  contents: read
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}

.github/workflows/markdown.yml

@@ -13,8 +13,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
-# Declare default permissions as read only
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   linter:

.github/workflows/mkdocs.yml

@@ -16,8 +16,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
-# Declare default permissions as read only
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   build:

.github/workflows/scorecard.yml

@@ -11,8 +11,8 @@ on:
   push:
     branches: [ "main" ]
 
-# Declare default permissions as read-only.
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   analysis:

.github/workflows/tpip.yml

@@ -16,8 +16,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
-# Declare default permissions as read only
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   report: