From 7bbd2042ae88d3dab195ac955329bd32f994e2e0 Mon Sep 17 00:00:00 2001
From: Veronica Berglyd Olsen <1619840+vkbo@users.noreply.github.com>
Date: Mon, 27 Oct 2025 21:18:26 +0100
Subject: [PATCH] Add permissions to test and linting jobs

---
 .github/workflows/i18n.yml       | 2 ++
 .github/workflows/syntax.yml     | 2 ++
 .github/workflows/test_linux.yml | 2 ++
 .github/workflows/test_mac.yml   | 2 ++
 .github/workflows/test_win.yml   | 2 ++
 5 files changed, 10 insertions(+)

diff --git a/.github/workflows/i18n.yml b/.github/workflows/i18n.yml
index 238ae27a..3e8dff9b 100644
--- a/.github/workflows/i18n.yml
+++ b/.github/workflows/i18n.yml
@@ -8,6 +8,8 @@ on:
 jobs:
   buildI18n:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Python Setup
         uses: actions/setup-python@v6
diff --git a/.github/workflows/syntax.yml b/.github/workflows/syntax.yml
index f3d723f9..fc7c7f7f 100644
--- a/.github/workflows/syntax.yml
+++ b/.github/workflows/syntax.yml
@@ -13,6 +13,8 @@ on:
 jobs:
   checkSyntax:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout Source
         uses: actions/checkout@v5
diff --git a/.github/workflows/test_linux.yml b/.github/workflows/test_linux.yml
index 1f84fa95..e263ebd9 100644
--- a/.github/workflows/test_linux.yml
+++ b/.github/workflows/test_linux.yml
@@ -21,6 +21,8 @@ jobs:
           - "3.14"
       fail-fast: false
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout Source
         uses: actions/checkout@v5
diff --git a/.github/workflows/test_mac.yml b/.github/workflows/test_mac.yml
index d191ba4b..e3a7632c 100644
--- a/.github/workflows/test_mac.yml
+++ b/.github/workflows/test_mac.yml
@@ -13,6 +13,8 @@ on:
 jobs:
   testMac:
     runs-on: macos-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout Source
         uses: actions/checkout@v5
diff --git a/.github/workflows/test_win.yml b/.github/workflows/test_win.yml
index 1cb2dbdd..2ab5c8d1 100644
--- a/.github/workflows/test_win.yml
+++ b/.github/workflows/test_win.yml
@@ -13,6 +13,8 @@ on:
 jobs:
   testWin:
     runs-on: windows-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout Source
         uses: actions/checkout@v5