Setting workflow permissions.

Author: armfazh

.github/workflows/semgrep.yml

@@ -7,6 +7,8 @@ on:
       - master
   schedule:
     - cron: '0 0 * * *'
+permissions:
+  contents: read
 name: Semgrep config
 jobs:
   semgrep:
@@ -20,5 +22,5 @@ jobs:
     container:
       image: semgrep/semgrep
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - run: semgrep ci

.github/workflows/tests.yml

@@ -7,7 +7,8 @@ on:
   pull_request:
     branches:
       - main
-
+permissions:
+  contents: read
 jobs:
   testing:
     name: Testing on Node v${{ matrix.node }}
@@ -17,10 +18,10 @@ jobs:
         node: [20]
     steps:
       - name: Checking out
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
 
       - name: Use Node.js v${{ matrix.node }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node }}
           cache: "npm"