fix(ci): 🔒️ more explicit permissions

closes #136
closes #138
closes #139
closes #142
closes #143

Author: djmaxus

.github/workflows/ci.yml

@@ -12,10 +12,16 @@ concurrency:
 jobs:
     lints: # fast lints
         name: Lints
+        permissions:
+            contents: read
         uses: ./.github/workflows/lints.yml
     matlab: # heavy MATLAB checks
+        permissions:
+            contents: read
         needs: lints
         uses: ./.github/workflows/matlab.yml
     webpage-build:
+        permissions:
+            contents: read
         needs: lints
         uses: ./.github/workflows/webpage-build.yml

.github/workflows/lints.yml

@@ -2,9 +2,13 @@ on:
     workflow_call:
 jobs:
     links:
+        permissions:
+            contents: read
         uses: ./.github/workflows/links.yml
     commit:
         name: Commit messages
+        permissions:
+            contents: read
         runs-on: ubuntu-latest
         steps:
         - uses: opensource-nepal/commitlint@v1