ci(workflows): assign explicit permissions (#8)

Author: caugner

.github/workflows/ci.yml

@@ -22,6 +22,9 @@ concurrency:
   group: ${{github.workflow}}-${{github.ref}}
   cancel-in-progress: true
 
+# No GITHUB_TOKEN permissions, as we don't use it.
+permissions: {}
+
 jobs:
   test:
     name: Test parser

.github/workflows/fuzz.yml

@@ -10,6 +10,9 @@ on:
       - src/scanner.c
   workflow_dispatch:
 
+# No GITHUB_TOKEN permissions, as we don't use it.
+permissions: {}
+
 jobs:
   fuzz:
     env:

.github/workflows/lint.yml

@@ -10,6 +10,9 @@ on:
       - grammar.js
   workflow_dispatch:
 
+# No GITHUB_TOKEN permissions, as we don't use it.
+permissions: {}
+
 jobs:
   lint:
     runs-on: ubuntu-latest