ci: require as little permissions as possible

.github/workflows/cmake-freebsd.yml

@@ -1,5 +1,7 @@
 name: FreeBSD CMake
 
+permissions: {}
+
 on:
   workflow_dispatch:
   push:

.github/workflows/cmake-linux.yml

@@ -1,5 +1,7 @@
 name: Linux CMake
 
+permissions: {}
+
 on:
   workflow_dispatch:
   push:

.github/workflows/cmake-macos.yml

@@ -1,5 +1,7 @@
 name: macOS CMake
 
+permissions: {}
+
 on:
   workflow_dispatch:
   push:

.github/workflows/cmake-netbsd.yml

@@ -1,5 +1,7 @@
 name: NetBSD CMake
 
+permissions: {}
+
 on:
   workflow_dispatch:
   push:

.github/workflows/cmake-openbsd.yml

@@ -1,5 +1,7 @@
 name: OpenBSD CMake
 
+permissions: {}
+
 on:
   workflow_dispatch:
   push:

.github/workflows/continuous-build-freebsd.yml

@@ -1,5 +1,7 @@
 name: Continuous Build FreeBSD
 
+permissions: {}
+
 on:
   workflow_dispatch:
   push:

.github/workflows/continuous-build-gpu.yml

@@ -1,5 +1,7 @@
 name: Continuous Build Gpu
 
+permissions: {}
+
 on:
   workflow_dispatch:
   push:

.github/workflows/continuous-build-linux.yml

@@ -1,5 +1,7 @@
 name: Continuous Build Linux
 
+permissions: {}
+
 on:
   workflow_dispatch:
   push:

.github/workflows/continuous-build-macos.yml

@@ -1,5 +1,7 @@
 name: Continuous Build MacOS
 
+permissions: {}
+
 on:
   workflow_dispatch:
   push:

.github/workflows/continuous-build-netbsd.yml

@@ -1,5 +1,7 @@
 name: Continuous Build NetBSD
 
+permissions: {}
+
 on:
   workflow_dispatch:
   push:

.github/workflows/continuous-build-openbsd.yml

@@ -1,5 +1,7 @@
 name: Continuous Build OpenBSD
 
+permissions: {}
+
 on:
   workflow_dispatch:
   push:

.github/workflows/test-snap-can-build.yml

@@ -1,4 +1,7 @@
 name: 🧪 Test snap can be built on x86_64
+
+permissions: {}
+
 on:
   workflow_dispatch:
   push: