Merge pull request #215 from wlemkows/fix-scorecard-issues

Add permissions to yml files

Author: bratpiorka

.github/workflows/basic.yml

@@ -6,6 +6,9 @@ env:
   BUILD_DIR : "${{github.workspace}}/build/"
   INSTL_DIR : "${{github.workspace}}/build/install-dir"
 
+permissions:
+  contents: read
+
 jobs:
   icx-build:
     name: Build - Intel C++ Compiler

.github/workflows/codeql.yml

@@ -9,7 +9,7 @@ jobs:
   analyze:
     name: Analyze
     permissions:
-        security-events: write
+      security-events: write
     strategy:
         fail-fast: false
         matrix:

.github/workflows/docs.yml

@@ -10,6 +10,9 @@ concurrency:
   group: "docs"
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest

.github/workflows/pr_push.yml

@@ -6,6 +6,9 @@ concurrency:
     group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
     cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
     FastBuild:
         name: Fast build
@@ -83,5 +86,8 @@ jobs:
         needs: [Build]
         uses: ./.github/workflows/benchmarks.yml
     CodeQL:
+        permissions:
+          contents: read
+          security-events: write
         needs: [Build]
         uses: ./.github/workflows/codeql.yml