Merge pull request #27 from roc-lang/add-workflow-permissions

add workflow permissions

Author: Anton-4

.github/workflows/bundle.yaml

@@ -6,6 +6,9 @@ on:
     types:
       - published
 
+# Do not add permissions here! Configure them at the job level!
+permissions: {}
+
 jobs:
   bundle:
     name: Bundle

.github/workflows/generate-docs.yaml

@@ -6,6 +6,9 @@ on:
     types:
       - published
 
+# Do not add permissions here! Configure them at the job level!
+permissions: {}
+
 jobs:
   generate-docs:
     name: Generate docs

.github/workflows/tests-nix.yaml

@@ -6,7 +6,10 @@ on:
 concurrency:
     group: ${{ github.workflow }}-${{ github.ref }}
     cancel-in-progress: true
-  
+
+# Do not add permissions here! Configure them at the job level!
+permissions: {}
+
 jobs:  
     test-examples-nix:
       runs-on: [ubuntu-24.04]

.github/workflows/tests.yaml

@@ -7,8 +7,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
-jobs:
+# Do not add permissions here! Configure them at the job level!
+permissions: {}
 
+jobs:
   test-examples-ubuntu:
     runs-on: [ubuntu-24.04]
     steps: