Set workflow permissions

Author: smoelius

.github/workflows/check_release_necessity.yml

@@ -5,6 +5,9 @@ name: Check release necessity
 
 on: [pull_request]
 
+permissions:
+  issues: write
+
 jobs:
   check-release-necessity:
     # smoelius: Note that `github.event.pull_request.user.login` is the user that opened the pull

.github/workflows/ci.yml

@@ -14,6 +14,9 @@ concurrency:
 env:
   CARGO_TERM_COLOR: always
 
+permissions:
+  contents: read
+
 jobs:
   check-up-to-dateness:
     outputs:

.github/workflows/update_third_party_tests.yml

@@ -9,6 +9,9 @@ concurrency:
   group: update-third-party-tests-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: write
+
 jobs:
   update:
     runs-on: ubuntu-latest