GHA: disable permissions where missing

Reviewed-by: Daniel Stenberg
Closes #13306

diff --git a/.github/workflows/badwords.yml b/.github/workflows/badwords.yml
index 0165d9bfbe9bcf0381bc2c531e3a8ff4c8833cee..06b14078563cdc22e13f0fe089892b3842190285 100644 (file)
--- a/.github/workflows/badwords.yml
+++ b/.github/workflows/badwords.yml
@@ -15,6 +15,8 @@ on:
     branches:
     - master
 
+permissions: {}
+
 jobs:
   check:
 

diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml
index 2b095dae75a708da7d6de842d4d1117156dab80e..7a7b744a5943f616ea45d32fa6c3ff414062ff31 100644 (file)
--- a/.github/workflows/codespell.yml
+++ b/.github/workflows/codespell.yml
@@ -20,6 +20,8 @@ on:
       - 'src/**'
       - 'include/**'
 
+permissions: {}
+
 jobs:
   codespell:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/distcheck.yml b/.github/workflows/distcheck.yml
index 15068b640b4a938248a43ceb120e308371ec3165..1a644ef7d11b0b46b165a32608ceda8872701bc0 100644 (file)
--- a/.github/workflows/distcheck.yml
+++ b/.github/workflows/distcheck.yml
@@ -17,6 +17,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   maketgz-and-verify-in-tree:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/man-examples.yml b/.github/workflows/man-examples.yml
index 6f0d1e8ae42f0212fc4f235ccf9f234b1ba62992..2382b670a66d1fea437fcfb51d2186f2cf2b9045 100644 (file)
--- a/.github/workflows/man-examples.yml
+++ b/.github/workflows/man-examples.yml
@@ -21,6 +21,8 @@ on:
       - 'docs/libcurl/opts/*.3'
       - '.github/scripts/verify-examples.pl'
 
+permissions: {}
+
 jobs:
   verify:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/synopsis.yml b/.github/workflows/synopsis.yml
index 0938f4bfc98c9e80da1083996f97bb8ba42174a5..0e7f0a6d136e08164e215fd33622147fc7af3b30 100644 (file)
--- a/.github/workflows/synopsis.yml
+++ b/.github/workflows/synopsis.yml
@@ -17,6 +17,8 @@ on:
     paths:
       - 'docs/libcurl/curl_*.3'
 
+permissions: {}
+
 jobs:
   verify:
     runs-on: ubuntu-latest