Merge pull request #6746 from turrisxyz/Pinned-Dependencies-GitHub

chore: Set permissions for GitHub actions

.github/workflows/ci.yml

@@ -28,6 +28,8 @@ jobs:
     - run: nix --experimental-features 'nix-command flakes' flake check -L
 
   check_cachix:
+    permissions:
+      contents: none
     name: Cachix secret present for installer tests
     runs-on: ubuntu-latest
     outputs:

.github/workflows/hydra_status.yml

@@ -3,6 +3,9 @@ on:
   schedule:
     - cron: "12,42 * * * *"
   workflow_dispatch:
+permissions:
+  contents: read
+
 jobs:
   check_hydra_status:
     name: Check Hydra status