Three CI workflows that need only `contents: read` permissions and
no other permissions did not have explicit permissions set, and
would therefore be given default permissions configured for the
repository, which might be more expansive than the workflows need.

It is recommended to set explicit workflow permissions [1]. This
does that, specifying permissions as `pythonpackage.yml` already
did, and closing three `actions/missing-workflow-permissions`
CodeQL alerts (new since gitpython-developers#2032 enabled scanning of GHA workflows).

[1]: https://codeql.github.com/codeql-query-help/actions/actions-missing-workflow-permissions/

EliahKagan added a commit to EliahKagan/gitdb that referenced this pull request

EliahKagan added a commit to EliahKagan/smmap that referenced this pull request

This was referenced

EliahKagan added a commit to EliahKagan/gitdb that referenced this pull request