Add `permissions` to GitHub Action Workflows

diff --git a/.github/workflows/codestyle.yml b/.github/workflows/codestyle.yml
index a63c5abfb8dffc71224e6ab45e7a764fca2af602..7e79479dfdd132f5d1de9f80aac213e061203146 100644 (file)
--- a/.github/workflows/codestyle.yml
+++ b/.github/workflows/codestyle.yml
@@ -6,6 +6,9 @@ on:
     - master
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   php:
     name: PHP

diff --git a/.github/workflows/php.yml b/.github/workflows/php.yml
index 9913c08ca8d5d421826832a3006840057a9bfefa..a6f69ddefc45b28f97588f2eecb2f2dd94fb4777 100644 (file)
--- a/.github/workflows/php.yml
+++ b/.github/workflows/php.yml
@@ -10,6 +10,9 @@ on:
     - master
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   syntax:
     name: "Check Syntax (${{ matrix.php }})"

diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml
index 0facc2bd753e704c7f4d347a191175df5d1294df..6d94faff556a0c5576c89e3842c4981d8752e035 100644 (file)
--- a/.github/workflows/pull_request.yml
+++ b/.github/workflows/pull_request.yml
@@ -10,6 +10,10 @@ on:
     - ready_for_review
     - review_requested
 
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   commit_message:
     name: Check Commit Message