set top-level permission with default read

Author: ddevsr

.github/workflows/deploy-apidocs.yml

@@ -11,6 +11,9 @@ on:
       - 'system/**'
       - '.github/workflows/deploy-apidocs.yml'
 
+permissions:
+  contents: read
+
 jobs:
   build:
     name: Deploy to api

.github/workflows/deploy-distributables.yml

@@ -6,11 +6,12 @@ on:
   release:
     types: [published]
 
+permissions:
+  contents: read
+
 jobs:
   check-version:
     name: Check for updated version
-    permissions:
-      contents: read
     runs-on: ubuntu-22.04
 
     steps:

.github/workflows/deploy-userguide-latest.yml

@@ -12,6 +12,9 @@ on:
     paths:
       - 'user_guide_src/**'
 
+permissions:
+  contents: read
+
 jobs:
   build:
     name: Deploy to gh-pages