ci: ghalint

Author: guitarrapc

.github/workflows/build.yaml

@@ -3,17 +3,22 @@ on:
   workflow_dispatch:
   schedule:
     - cron: 0 0 * * 0 # At 00:00 on Sunday.
+
   push:
     branches: ["main"]
   pull_request:
     branches: ["main"]
 
 jobs:
   build:
+    permissions:
+      contents: read
     runs-on: windows-latest
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - name: Install Modules
         shell: pwsh
         run: |

.github/workflows/release.yaml

@@ -6,6 +6,8 @@ on:
 
 jobs:
   release:
+    permissions:
+      contents: write
     runs-on: windows-latest
     timeout-minutes: 15
     steps:
@@ -14,6 +16,8 @@ jobs:
         env:
           REF: ${{ github.ref }}
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - run: . ./publish.ps1 -Version $env:GIT_TAG
         shell: pwsh
       - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2