SEC: disable default gha permissions (#367)

Author: neutrinoceros

.github/workflows/test_publish.yml

@@ -15,6 +15,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   release_default:
     uses: ./.github/workflows/publish.yml

.github/workflows/test_publish_pure_python.yml

@@ -15,6 +15,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   release:
     uses: ./.github/workflows/publish_pure_python.yml

.github/workflows/test_tox.yml

@@ -19,6 +19,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   test_pyos:
     uses: ./.github/workflows/tox.yml

.github/workflows/update_tag.yml

@@ -5,6 +5,8 @@ on:
     tags:
       - "v*"
 
+permissions: {}
+
 jobs:
   update-majorver:
     name: Update Major Version Tag