python-wheels: set workflow-level permissions

andrewchi · andrewchi · commit 50d71d3b49cb · 2026-03-16T13:01:57.000-04:00
diff --git a/.github/workflows/emu-python-wheels.yml b/.github/workflows/emu-python-wheels.yml
@@ -12,6 +12,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   sync-self-check:
     name: Sync self-check
@@ -36,8 +39,6 @@ jobs:
     environment:
       name: pypi
       url: https://pypi.org/p/mercury-python
-    permissions:
-      contents: read
     strategy:
       matrix:
         os: [ubuntu-latest, macos-latest]
diff --git a/.github/workflows/pub-python-wheels.yml b/.github/workflows/pub-python-wheels.yml
@@ -12,6 +12,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   sync-self-check:
     name: Sync self-check
@@ -36,8 +39,6 @@ jobs:
     environment:
       name: pypi
       url: https://pypi.org/p/mercury-python
-    permissions:
-      contents: read
     strategy:
       matrix:
         os: [ubuntu-latest, macos-latest]
