ci: scope down GitHub Token permissions (#581)

AdnaneKhan · web-flow · commit 8318aba4b3d9 · 2025-11-14T18:17:40.000-08:00
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -8,6 +8,9 @@ on:
     branches:
       - "*"
 
+permissions:
+  contents: read
+
 jobs:
   run-checks-and-unit-tests:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/remove-old-artifacts.yml b/.github/workflows/remove-old-artifacts.yml
@@ -5,6 +5,9 @@ on:
     # Every day at 1am
     - cron: "0 1 * * *"
 
+permissions:
+  actions: write
+
 jobs:
   remove-old-artifacts:
     runs-on: ubuntu-latest
