Fix workflow level permissions in `smokechow` and `detect-conflicts`

diff --git a/.github/workflows/detect-conflicts.yml b/.github/workflows/detect-conflicts.yml
index 68448c6d0ace14c3c9313c4fc8e9ca18c3f53fc9..38d526bd9bedab168e6bbcbc2b87de2993bc76e7 100644 (file)
--- a/.github/workflows/detect-conflicts.yml
+++ b/.github/workflows/detect-conflicts.yml
@@ -4,6 +4,8 @@ on:
   pull_request_target: # zizmor: ignore[dangerous-triggers]
     types: [synchronize]
 
+permissions: {}
+
 jobs:
   main:
     permissions:

diff --git a/.github/workflows/smokeshow.yml b/.github/workflows/smokeshow.yml
index f2c7e3692b0288914897e7c0d75d2bc6ece3050a..17ba8d80c84aeb332de15b6b9e5163cc19e5cba7 100644 (file)
--- a/.github/workflows/smokeshow.yml
+++ b/.github/workflows/smokeshow.yml
@@ -5,12 +5,13 @@ on:
     workflows: [Test]
     types: [completed]
 
-permissions:
-  statuses: write
+permissions: {}
 
 jobs:
   smokeshow:
     runs-on: ubuntu-latest
+    permissions:
+      statuses: write
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with: