Harden GitHub Workflows permissions (#772)

ste93cry · web-flow · commit 5431c137a84c · 2023-10-25T12:22:51.000+02:00
diff --git a/.github/workflows/publish-release.yaml b/.github/workflows/publish-release.yaml
@@ -10,6 +10,9 @@ on:
         description: Force a release even when there are release-blockers (optional)
         required: false
 
+permissions:
+  contents: read
+
 jobs:
   release:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/static-analysis.yaml b/.github/workflows/static-analysis.yaml
@@ -8,6 +8,9 @@ on:
       - develop
       - release/**
 
+permissions:
+  contents: read
+
 jobs:
   php-cs-fixer:
     name: PHP-CS-Fixer
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
@@ -8,6 +8,9 @@ on:
       - develop
       - release/**
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     name: Tests
