GH Actions: Set explicit permissions

.github/workflows/markdowner.yml

@@ -2,26 +2,29 @@ name: Run markdowner.py on all markdown files and see if there are changes
 
 on:
   push:
-    branches: [ master ]
+    branches: [master]
   pull_request:
-    branches: [ master ]
+    branches: [master]
+
+permissions:
+  contents: read
 
 jobs:
   check:
     runs-on: ubuntu-24.04
     steps:
-    - name: Checks-out repository
-      uses: actions/checkout@v4
-    - name: Set up Python 3.12
-      uses: actions/setup-python@v5
-      with:
-        python-version: "3.12"
-    - name: Run markdowner.py to (hopefully not) edit markdown files
-      run: |
-        find . -name '*.markdown' -type f -exec python3 .github/workflows/markdowner.py {} all \; | tee output.log
-    - name: Check output.log file for warnings
-      run: |
-        ! grep WARNING output.log
-    - name: Check if there are changes
-      run: |
-        git diff --exit-code
+      - name: Checks-out repository
+        uses: actions/checkout@v4
+      - name: Set up Python 3.12
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: Run markdowner.py to (hopefully not) edit markdown files
+        run: |
+          find . -name '*.markdown' -type f -exec python3 .github/workflows/markdowner.py {} all \; | tee output.log
+      - name: Check output.log file for warnings
+        run: |
+          ! grep WARNING output.log
+      - name: Check if there are changes
+        run: |
+          git diff --exit-code

.github/workflows/shellcheck.yml

@@ -1,15 +1,19 @@
 name: Check all shell scripts
+
 on: pull_request
 
+permissions:
+  contents: read
+
 jobs:
   shellcheck:
     name: Run shellcheck on shell scripts
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v3
-      with:
-        submodules: recursive
-    - name: Install dependencies
-      run: sudo apt-get update -y && sudo apt-get install -y shellcheck
-    - name: Run shellcheck
-      run: make check
+      - uses: actions/checkout@v3
+        with:
+          submodules: recursive
+      - name: Install dependencies
+        run: sudo apt-get update -y && sudo apt-get install -y shellcheck
+      - name: Run shellcheck
+        run: make check