Fix trunk

.github/workflows/pull_request.yml

@@ -7,6 +7,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions: read-all
+
 jobs:
   spell_check:
     name: Spell Check

.github/workflows/push.yml

@@ -9,6 +9,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions: read-all
+
 jobs:
   spell_check:
     name: Spell check

.github/workflows/rust_tests.yml

@@ -3,6 +3,8 @@ name: Rust CI
 on:
   workflow_call:
 
+permissions: read-all
+
 jobs:
   test:
     name: Rust

.github/workflows/spell_check.yml

@@ -4,6 +4,8 @@ name: Spell Check
 on:
   workflow_call:
 
+permissions: read-all
+
 jobs:
   spell-check:
     name: Spell Check