Merge pull request #245 from 10up/fix/workflow-perms

Fix/workflow perms

Author: jeffpaul

.github/workflows/build-release-zip.yml

@@ -1,5 +1,8 @@
 name: Build release zip
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
   workflow_call:

.github/workflows/cypress.yml

@@ -8,6 +8,9 @@ on:
   pull_request:
     branches:
       - develop
+permissions:
+  contents: read
+  actions: read
 jobs:
   build:
     uses: 10up/simple-page-ordering/.github/workflows/build-release-zip.yml@develop

.github/workflows/jslint.yml

@@ -9,6 +9,11 @@ on:
     branches:
       - develop
 
+permissions:
+  checks: write
+  contents: read
+  pull-requests: write
+
 jobs:
   jslint:
     runs-on: ubuntu-latest

.github/workflows/php-compatibility.yml

@@ -1,4 +1,6 @@
 name: PHP Compatibility
+permissions:
+  contents: read
 
 on:
   push:

.github/workflows/phpcs.yml

@@ -1,5 +1,8 @@
 name: PHPCS
 
+permissions:
+  contents: read
+
 on:
   push:
     branches:

.github/workflows/push-asset-readme-update.yml

@@ -1,5 +1,8 @@
 name: Plugin asset/readme update
 
+permissions:
+  contents: read
+
 on:
   push:
     branches:

.github/workflows/push-deploy.yml

@@ -1,5 +1,8 @@
 name: Deploy to WordPress.org
 
+permissions:
+  contents: read
+
 on:
   push:
     tags:

.github/workflows/repo-automator.yml

@@ -1,5 +1,9 @@
 name: 'Repo Automator'
 
+permissions:
+  contents: read
+  pull-requests: write
+
 on:
   issues:
     types: