Merge pull request #4136 from turrisxyz/Pinned-Dependencies-GitHub

chore: Set permissions for GitHub actions

.github/workflows/build.yml

@@ -2,6 +2,9 @@ name: Simple test build
 on:
   - push
   - pull_request
+permissions:
+  contents: read
+
 jobs:
   test:
     strategy:

.github/workflows/coverity.yml

@@ -3,6 +3,9 @@ on:
   push:
     branches:
       - master
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/sanitizers.yml

@@ -2,6 +2,9 @@ name: Sanitizers build
 on:
   - push
   - pull_request
+permissions:
+  contents: read
+
 jobs:
   sanitizers:
     strategy:

.github/workflows/static-analysis.yml

@@ -2,6 +2,9 @@ name: Static analysis
 on:
   - push
   - pull_request
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-18.04