build: explicitly set permissions for workflows

Author: Planeshifter

.github/workflows/run_affected_benchmarks.yml

@@ -35,6 +35,11 @@ on:
       # List paths for which changes should trigger this workflow:
       - 'lib/**/benchmark/**'
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+      
 # Workflow jobs:
 jobs:
 

.github/workflows/run_affected_examples.yml

@@ -36,6 +36,11 @@ on:
       # List paths for which changes should trigger this workflow:
       - 'lib/**/examples/**'
       - 'lib/**/README.md'
+      
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
 
 # Workflow jobs:
 jobs:

.github/workflows/run_affected_tests.yml

@@ -72,6 +72,11 @@ on:
       directories:
         description: 'List of changed directories for which to run affected tests (space separated):'
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs:
 

.github/workflows/run_tests_coverage.yml

@@ -72,6 +72,11 @@ on:
       directories:
         description: 'List of changed directories for which to run tests (space separated):'
 
+# Global permissions:
+permissions:
+  # Allow read-only access to the repository contents:
+  contents: read
+
 # Workflow jobs:
 jobs: