Merge pull request #10523 from arpitjain099/ci/add-permissions

ci: declare contents: read in four pure-CI workflows

diff --cc .github/workflows/ci.yaml
index 2e8a06ebd5e44e9d5e59707e628c7d31eb245440,179632ee4eb0f1e6b381b2567ed3e974b6c5cafa..353341c817566a712b323fc1e3f5c53193e1c218
--- 1/.github/workflows/ci.yaml
--- 2/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@@ -12,10 -12,13 +12,13 @@@ on
    pull_request:
      branches: ['**']
      paths:
 -    - "cc-by-sa/*"
 -    - "to_*.txt"
 +    - "cc-by-sa/knowledge/**"
      - ".github/workflows/ci.yaml"
 +    - ".github/workflows/knowledge_graph.py"
  
+ permissions:
+   contents: read
+ 
  jobs:
    check_knowledge_graph:
      runs-on: ubuntu-latest