ci: explicitly set permissions

Author: DerStimmler

.github/workflows/check.yml

@@ -9,6 +9,10 @@ on:
 
 jobs:
   test-versions:
+    permissions:
+      contents: read
+      actions: write
+      checks: write
     strategy:
       matrix:
         csharpFunctionalExtensionsVersion: ["2.29.0", "2.*", "3.0.0", "3.*"]
@@ -20,6 +24,8 @@ jobs:
   check:
     runs-on: ubuntu-latest
     needs: test-versions
+    permissions:
+      contents: read
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/publish.yml

@@ -7,6 +7,10 @@ on:
 
 jobs:
   test-versions:
+    permissions:
+      contents: read
+      actions: write
+      checks: write
     strategy:
       matrix:
         csharpFunctionalExtensionsVersion: [ '2.29.0', '2.*', '3.0.0', '3.*' ]

.github/workflows/test-version.yml

@@ -7,6 +7,11 @@ on:
         type: string
         required: true
 
+permissions:
+  contents: read
+  actions: write
+  checks: write
+
 jobs:
   test-version:
     runs-on: ubuntu-latest