Add `permissions` to GitHub Action Workflows

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4ce1db381fe899ac6e5a2b5827d67eb0b3d8114b..3ee420434156962f997b7070a97f371a1138be02 100644 (file)
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,6 +6,9 @@ on:
   schedule:
   - cron: '0 0 1 * *'
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml
index 1651000abd0e8eb6a898266fd96591a3480134e8..baf574a83d7479bee757d244b59f10174475ece5 100644 (file)
--- a/.github/workflows/docker-image.yml
+++ b/.github/workflows/docker-image.yml
@@ -3,6 +3,10 @@ on:
   push:
     branches:
       - master
+
+permissions:
+  contents: read
+
 jobs:
   push_to_registry:
     name: Push Docker image to ghcr.io