DEV: specify minimum permissions for github actions to work

Author: rmcar17

.github/workflows/add_source_to_release.yml

@@ -4,6 +4,9 @@ on:
   release:
     types: [published]
 
+permissions:
+  contents: write
+
 jobs:
   upload-source:
     runs-on: ubuntu-latest

.github/workflows/build_container.yml

@@ -8,6 +8,10 @@ on:
     paths:
       - .devcontainer/DockerFile
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   build-and-push:
     runs-on: ubuntu-latest

.github/workflows/build_docs.yml

@@ -14,6 +14,9 @@ on:
       - 'mkdocs.yml'
       - 'rtd_get_docs.py'
 
+permissions:
+  contents: read
+
 jobs:
   build-iqtree:
     name: Fetch or Build IQ-TREE Static Library

.github/workflows/build_wheels.yml

@@ -2,6 +2,9 @@ name: Build Wheels
 
 on: [workflow_dispatch]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     name: Build Wheels for ${{matrix.platform_id}} on ${{matrix.os}}

.github/workflows/ci.yml

@@ -7,6 +7,9 @@ on:
   pull_request:
   push:
 
+permissions:
+  contents: read
+
 jobs:
   build-iqtree:
     name: Fetch or Build IQ-TREE Static Library on ${{matrix.os}}

.github/workflows/release.yml

@@ -2,6 +2,9 @@ name: Release
 
 on: [workflow_dispatch]
 
+permissions:
+  contents: read
+
 jobs:
   build-wheels:
     name: Build Wheels for ${{matrix.platform_id}} on ${{matrix.os}}