chore: address remaining scorecard findings (#183)

Kenneth Rosario · web-flow · commit dc1ca857097a · 2023-04-06T11:59:15.000-07:00
diff --git a/.github/workflows/buildpack-integration-test.yml b/.github/workflows/buildpack-integration-test.yml
@@ -6,6 +6,10 @@ on:
     branches:
       - master
   workflow_dispatch:
+
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   go113-buildpack-test:
     uses: GoogleCloudPlatform/functions-framework-conformance/.github/workflows/buildpack-integration-test.yml@v1.8.0
diff --git a/.github/workflows/conformance.yml b/.github/workflows/conformance.yml
@@ -7,6 +7,10 @@ on:
     branches:
       - master
   workflow_dispatch:
+
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   # Download the Go conformance client binary in it's own Github runner so that the version of Go used doesn't matter
   download-conformance-client:
