Merge pull request #212 from ymyzk/actions-permissions

Set permissions explicitly in GitHub Actions

Author: ymyzk

.github/workflows/packaging.yml

@@ -12,15 +12,14 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        python-version: [3.13]
+    permissions:
+      contents: read
     steps:
     - uses: actions/checkout@v4
-    - name: Set up Python ${{ matrix.python-version }}
+    - name: Set up Python
       uses: actions/setup-python@v5
       with:
-        python-version: ${{ matrix.python-version }}
+        python-version: 3.13
     - name: Install dependencies
       run: python -m pip install --upgrade build
     - name: Create packages

.github/workflows/tests.yml

@@ -8,6 +8,8 @@ on:
 jobs:
   build:
     runs-on: ${{ matrix.platform }}
+    permissions:
+      contents: read
     strategy:
       fail-fast: false
       matrix:
@@ -33,7 +35,6 @@ jobs:
             python-version: 3.7
           - platform: windows-latest
             python-version: pypy-3.9
-
     steps:
     - uses: actions/checkout@v4
       if: ${{ ! startsWith(matrix.python-version, 'pypy-') }}