ci: restric file scope perms in workflows

vicentebolea · vicentebolea · commit a6dd07d8b0e8 · 2025-10-29T19:52:37.000-04:00
diff --git a/.github/workflows/external.yml b/.github/workflows/external.yml
@@ -5,7 +5,6 @@ on:
 
 permissions:
   contents: read
-  statuses: write
 
 jobs:
   generate_statuses:
diff --git a/.github/workflows/pypackaging.yml b/.github/workflows/pypackaging.yml
@@ -25,6 +25,9 @@ on:
     types:
       - published
 
+permissions:
+  contents: read
+
 env:
   ADIOS2_CUSTOM_VERSION_OVERRIDE: ${{ github.event.inputs.overrideVersion }}
 
