SEC: disable all default permissions at workflow level

neutrinoceros · neutrinoceros · commit bdcbca3946f2 · 2025-10-29T08:29:25.000+01:00
diff --git a/.github/workflows/ci_workflows.yml b/.github/workflows/ci_workflows.yml
@@ -8,6 +8,7 @@ on:
     - '*'
   pull_request:
 
+permissions: {}
 
 jobs:
   security-scan:
