Merge pull request #298 from AdnaneKhan/update/scopedown-github-token

Scope down GitHub Token permissions

Author: arnaldo2792

.github/workflows/build.yml

@@ -24,6 +24,10 @@ on:
       # GitHub codeowners
       - '.github/CODEOWNERS'
 
+
+permissions:
+  contents: read
+
 concurrency:
   group: ${{ github.ref }}
   cancel-in-progress: true

.github/workflows/validate-changelog.yml

@@ -5,6 +5,10 @@ on:
     paths:
       - 'CHANGELOG.md'
 
+
+permissions:
+  contents: read
+
 jobs:
   validate:
     runs-on: ubuntu-latest