try to silence some scorecard warnings

diff --git a/.github/workflows/commit.yml b/.github/workflows/commit.yml
index 5fc8cb1fd5e6481378bb01bf4d1e53c85346db79..25d8c52f9ef461038a1c5447015d4f93130a7a52 100644 (file)
--- a/.github/workflows/commit.yml
+++ b/.github/workflows/commit.yml
@@ -3,6 +3,7 @@ on:
   push:
     branches:
     - dev
+permissions: read-all
 jobs:
   short-tests-0:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index 9206a07fd507c74db4d696b9aa699ea6b9407714..704e78922c38b0a6c0a4dc9a6e8d08345d53e12d 100644 (file)
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -7,6 +7,7 @@ on:
     - release
     - dev
     - master
+permissions: read-all
 jobs:
   regression-test:
     runs-on: ubuntu-latest