ci(github): Define explicit permission

Signed-off-by: Vincent Boutour <[email protected]>

.github/workflows/branch_clean.yaml

@@ -1,7 +1,17 @@
 ---
 name: Git
 
-permissions: {}
+permissions:
+  actions: none
+  checks: none
+  contents: read
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
 
 on:
   - pull_request

.github/workflows/build.yaml

@@ -1,7 +1,17 @@
 ---
 name: Build
 
-permissions: {}
+permissions:
+  actions: none
+  checks: none
+  contents: read
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
 
 on:
   push:
@@ -12,7 +22,7 @@ on:
       - main
 
 env:
-  SCRIPTS_NO_INTERACTIVE: 'true'
+  SCRIPTS_NO_INTERACTIVE: "true"
 
 defaults:
   run:
@@ -28,7 +38,7 @@ jobs:
       - name: Setup Golang
         uses: actions/setup-go@v4
         with:
-          go-version: '^1.20'
+          go-version: "^1.20"
 
       - name: Build
         run: |
@@ -61,7 +71,7 @@ jobs:
       - name: Setup Golang
         uses: actions/setup-go@v4
         with:
-          go-version: '^1.20'
+          go-version: "^1.20"
       - name: Build
         env:
           GO_ARCHS: linux/amd64 linux/arm linux/arm64 darwin/amd64 darwin/arm64

.github/workflows/herodote.yaml

@@ -1,7 +1,17 @@
 ---
 name: Herodote
 
-permissions: {}
+permissions:
+  actions: none
+  checks: none
+  contents: read
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
 
 on:
   push:
@@ -26,4 +36,4 @@ jobs:
           HERODOTE_SECRET: ${{ secrets.HERODOTE_SECRET }}
           GIT_HOST: github.com
           GIT_REPOSITORY: ${{ github.repository }}
-          SCRIPTS_NO_INTERACTIVE: '1'
+          SCRIPTS_NO_INTERACTIVE: "1"