Merge pull request #122 from hartwork/reduce-ci-permissions

Lock CI permissions down for security

.github/workflows/linux_and_macos.yml

@@ -3,17 +3,17 @@
 
 name: Build on Linux/macOS
 
-# Drop permissions to minimum, for security
-permissions:
-  contents: read
-
 on:
   pull_request:
   push:
   schedule:
     - cron: '0 3 * * 5'  # Every Friday at 3am
   workflow_dispatch:
 
+# Minimum permissions for security
+permissions:
+  contents: read
+
 jobs:
   linux:
     name: Build (${{ matrix.cc }} on ${{ matrix.runs-on }})