Merge pull request #23 from arpitjain099/chore/declare-workflow-perms-readonly

ci: declare workflow-level `contents: read` on 2 workflows

Author: SebastianAment

.github/workflows/notebooks.yml

@@ -26,6 +26,9 @@ on:
 env:
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
 
+permissions:
+  contents: read
+
 jobs:
   # Notebooks that use BOXCRETE_OPTIMIZATION_MODE run in both mortar and concrete modes
   mode-dependent-notebooks:

.github/workflows/tests.yml

@@ -16,6 +16,9 @@ on:
 env:
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest