Token permissions in CI

.github/workflows/gh-pages.yml

@@ -5,8 +5,13 @@ on:
     branches:
       - master
 
+permissions:
+  contents: read
+
 jobs:
   deploy:
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2

.github/workflows/test-build.yml

@@ -4,6 +4,9 @@ on:
   push:
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   standard:
 

.github/workflows/vfc_test_workflow.yml

@@ -10,11 +10,18 @@ on:
 
   workflow_dispatch:
 
+permissions:
+  contents: read
+
+jobs:
+
 
 jobs:
   run_verificarlo_tests:
     runs-on: ubuntu-latest
     container: verificarlo/verificarlo
+    permissions:
+      contents: write
 
     steps:
       - uses: actions/checkout@v2