Merge pull request #20 from equinor/Specify-permission-in-Github-actions

Specify permission in Github actions

Author: GuillaumeVix

.github/workflows/codecov.yml

@@ -3,8 +3,13 @@ name: Run tests and upload coverage
 on: 
   push
 
+permissions: {}
+
 jobs:
   test:
+    permissions:
+      contents: read
+      id-token: write
     name: Run tests and collect coverage
     runs-on: ubuntu-latest
     steps:

.github/workflows/publish.yml

@@ -5,6 +5,8 @@ on:
     branches: [main]
     types: [closed]
 
+permissions: {}
+
 jobs:
   publish:
     permissions: