.github/workflows/build_test.yml

@@ -12,8 +12,7 @@ on:
       - 'src/**'
       - 'test/fuzz/**'
 
-permissions:
+permissions: read-all
-  contents: read
 
 jobs:
   build:

.github/workflows/cifuzz.yml

@@ -5,8 +5,7 @@
 
 name: CIFuzz
 
-permissions:
+permissions: read-all
-  contents: read
 
 on:
   pull_request:

.github/workflows/codeql-analysis.yml

@@ -29,14 +29,14 @@ jobs:
       uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@5581e08a65fc3811c3ac78939dd59e7a8adbf003
+      uses: github/codeql-action/init@v1
       with:
         languages: ${{ matrix.language }}
 
     - run: sudo -E .github/workflows/unit_tests.sh SETUP
 
     - name: Autobuild
-      uses: github/codeql-action/autobuild@5581e08a65fc3811c3ac78939dd59e7a8adbf003
+      uses: github/codeql-action/autobuild@v1
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@5581e08a65fc3811c3ac78939dd59e7a8adbf003
+      uses: github/codeql-action/analyze@v1

.github/workflows/coverity.yml

@@ -9,8 +9,7 @@ on:
     # Run Coverity daily at midnight
     - cron:  '0 0 * * *'
 
-permissions:
+permissions: read-all
-  contents: read
 
 jobs:
   build:

.github/workflows/linter.yml

@@ -10,8 +10,7 @@ on:
       - main
       - v[0-9]+-stable
 
-permissions:
+permissions: read-all
-  contents: read
 
 jobs:
   build:

.github/workflows/mkosi.yml

@@ -14,8 +14,7 @@ on:
       - main
       - v[0-9]+-stable
 
-permissions:
+permissions: read-all
-  contents: read
 
 jobs:
   ci:

.github/workflows/unit_tests.yml

@@ -9,8 +9,7 @@ on:
       - main
       - v[0-9]+-stable
 
-permissions:
+permissions: read-all
-  contents: read
 
 jobs:
   build: