Workflow permissions

Author: arvkevi

.github/workflows/pythonpublish.yml

@@ -4,13 +4,18 @@ on:
   release:
     types: [created]
 
+permissions:
+  contents: read
+
 jobs:
   deploy:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write  # Only grant write permission to contents for this job
     steps:
-    - uses: actions/checkout@v1
+    - uses: actions/checkout@v2  # Updated to the latest version
     - name: Set up Python
-      uses: actions/setup-python@v1
+      uses: actions/setup-python@v2  # Updated to the latest version
       with:
         python-version: '3.x'
     - name: Install dependencies

.github/workflows/tests.yml

@@ -2,9 +2,13 @@ name: Unit tests and coverage
 
 on: [push, workflow_dispatch, pull_request]
 
-jobs:
-  build:
+permissions:
+  contents: read
+  issues: write
+  pull-requests: write
 
+jobs:
+  build:    
     runs-on: ${{ matrix.os }}
     strategy:
       matrix: