fix zizmor

Author: prajwolrg

.github/workflows/cron-nightly-rust.yml

@@ -5,6 +5,9 @@ on:
   workflow_dispatch: # allows manual triggering
 env:
   CARGO_TERM_COLOR: always
+
+permissions: {}
+
 jobs:
   format:
     name: Update nightly Rustc

.github/workflows/cron-zizmor.yml

@@ -4,6 +4,8 @@ on:
   schedule:
     - cron: "0 0 * * *" # Run every day at midnight
 
+permissions: {}
+
 jobs:
   zizmor:
     name: zizmor latest via PyPI

.github/workflows/dependencies.yml

@@ -25,6 +25,8 @@ env:
     </p>
     </details>
 
+permissions: {}
+
 jobs:
   update:
     name: Update

.github/workflows/lint-actions.yml

@@ -8,6 +8,8 @@ on:
     paths:
       - ".github/**"
 
+permissions: {}
+
 jobs:
   actionlint:
     runs-on: ubuntu-latest

.github/workflows/lint.yml

@@ -9,6 +9,8 @@ on:
 env:
   CARGO_TERM_COLOR: always
 
+permissions: {}
+
 jobs:
   clippy:
     name: Run clippy on crates
@@ -51,7 +53,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           persist-credentials: false
-      
+
       - name: Cleanup space
         uses: ./.github/actions/cleanup # zizmor: ignore[unpinned-uses]
       - name: Install toolchains

.github/workflows/mutants.yml

@@ -13,6 +13,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.run_id }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   mutants-test:
     name: Generate mutants on diff against default branch and test

.github/workflows/prover.yml

@@ -6,9 +6,12 @@ on:
   push:
     branches: [main]
 
+permissions: {}
+
 jobs:
   eval_perf:
-    permissions: write-all
+    permissions:
+      write-all
       # Needed to install the toolchain.
       #contents: write-all
       # Needed to post the performance report comments.
@@ -52,4 +55,3 @@ jobs:
         working-directory: perf
         env:
           RUSTFLAGS: "-C target-cpu=native -C link-arg=-fuse-ld=lld"
-

.github/workflows/unit.yml

@@ -15,6 +15,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   test:
     name: Run unit tests and generate report

.github/workflows/zizmor.yml

@@ -4,6 +4,8 @@ on:
   pull_request:
     branches: ["**"]
 
+permissions: {}
+
 jobs:
   zizmor:
     name: zizmor latest via PyPI