Set permissions at the job level

Author: dkotter

.github/workflows/wordpress-version-checker.yml

@@ -1,4 +1,5 @@
-name: "WordPress version checker"
+name: WordPress version checker
+
 on:
   push:
     branches:
@@ -10,12 +11,16 @@ on:
   schedule:
     - cron: '0 0 * * 1'
 
-permissions:
-  issues: write
+# Disable permissions for all available scopes by default.
+# Any needed permissions should be configured at the job level.
+permissions: {}
 
 jobs:
   wordpress-version-checker:
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
+
     steps:
       - name: WordPress version checker
         uses: skaut/wordpress-version-checker@9d247334f5b30202cb9c1f4aee74c52f37399f69 # v2.2.3