Add Default Read Permissions to GH Actions

.github/workflows/branch_main.yml

@@ -5,6 +5,9 @@ on:
 
 name: "Main Branch"
 
+permissions:
+  contents: read
+
 jobs:
   test:
     name: "Test"

.github/workflows/part_dependabot.yml

@@ -3,6 +3,9 @@ on:
 
 name: "Dependabot"
 
+permissions:
+  contents: read
+
 jobs:
   automerge_dependabot:
     name: "Automerge PRs"

.github/workflows/part_docs.yml

@@ -11,6 +11,9 @@ on:
 
 name: "Documentation"
 
+permissions:
+  contents: read
+
 jobs:
   generate:
     name: "Generate"

.github/workflows/part_release.yml

@@ -11,6 +11,9 @@ on:
 
 name: "Release"
 
+permissions:
+  contents: read
+
 jobs:
   create_prerelease:
     name: Create Prerelease

.github/workflows/part_test.yml

@@ -3,6 +3,9 @@ on:
 
 name: "Test"
 
+permissions:
+  contents: read
+
 jobs:
   phpunit:
     name: PHPUnit (PHP ${{ matrix.php }} on ${{ matrix.os }})

.github/workflows/pr.yml

@@ -6,6 +6,9 @@ on:
 
 name: "Pull Request"
 
+permissions:
+  contents: read
+
 jobs:
   test:
     name: "Test"

.github/workflows/tag-beta.yml

@@ -5,6 +5,9 @@ on:
 
 name: "Beta Tag"
 
+permissions:
+  contents: read
+
 jobs:
   release:
     name: "Release"

.github/workflows/tag-stable.yml

@@ -5,6 +5,9 @@ on:
 
 name: "Stable Tag"
 
+permissions:
+  contents: read
+
 jobs:
   release:
     name: "Release"