chore: update actions workflow permissions

.github/workflows/benchmark.yml

@@ -1,21 +1,24 @@
 name: Benchmark
 
-on: [ push ]
+on: [push]
+
+permissions:
+  contents: read
 
 jobs:
   benchmark:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        python-version: [ "3.12" ]
+        python-version: ["3.12"]
 
     steps:
       - uses: actions/checkout@v4
       - name: Set up Python ${{ matrix.python-version }}
         uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python-version }}
-          cache: 'pip'
+          cache: "pip"
       - name: Install dependencies
         run: |
           pip install --upgrade pip
@@ -25,9 +28,9 @@ jobs:
           pytest --benchmark-only --benchmark-json=benchmarks.json
       - name: Print summary
         run: |
-            echo "### Benchmark Results" >> $GITHUB_STEP_SUMMARY
-            echo "
-            Benchmark|Min (uS)|Median (uS)|Mean (uS)|Max (uS)|Iterations
-            ---|---|---|---|---|---
-            $(jq -r '.benchmarks[] | [.name,(.stats.min*1000000000 | round / 1000),(.stats.median*1000000000 | round / 1000),(.stats.mean*1000000000 | round / 1000),(.stats.max*1000000000 | round / 1000),.stats.rounds] | join("|")' benchmarks.json)
-            " >> $GITHUB_STEP_SUMMARY
+          echo "### Benchmark Results" >> $GITHUB_STEP_SUMMARY
+          echo "
+          Benchmark|Min (uS)|Median (uS)|Mean (uS)|Max (uS)|Iterations
+          ---|---|---|---|---|---
+          $(jq -r '.benchmarks[] | [.name,(.stats.min*1000000000 | round / 1000),(.stats.median*1000000000 | round / 1000),(.stats.mean*1000000000 | round / 1000),(.stats.max*1000000000 | round / 1000),.stats.rounds] | join("|")' benchmarks.json)
+          " >> $GITHUB_STEP_SUMMARY

.github/workflows/lint.yml

@@ -1,6 +1,9 @@
 name: Lint
 on: pull_request
 
+permissions:
+  contents: read
+
 jobs:
   lint:
     name: Lint and Format
@@ -15,7 +18,7 @@ jobs:
         uses: actions/setup-python@v5
         with:
           python-version: 3.12
-          cache: 'pip'
+          cache: "pip"
 
       - name: Install dependencies
         run: |
@@ -28,4 +31,4 @@ jobs:
 
       - name: Run mypy
         run: |
-          mypy .
+          mypy .

.github/workflows/run-test-harness.yml

@@ -4,6 +4,9 @@ on:
   pull_request:
     branches: [main]
 
+permissions:
+  contents: read
+
 jobs:
   harness-tests:
     name: Harness Tests

.github/workflows/test_examples.yml

@@ -1,22 +1,25 @@
 name: Test Examples
 
-on: [ push ]
+on: [push]
+
+permissions:
+  contents: read
 
 jobs:
   test_examples:
     name: Test Examples
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        python-version: [ "3.12" ]
+        python-version: ["3.12"]
 
     steps:
       - uses: actions/checkout@v4
       - name: Set up Python ${{ matrix.python-version }}
         uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python-version }}
-          cache: 'pip'
+          cache: "pip"
       - name: Install dependencies
         run: |
           pip install --upgrade pip
@@ -35,4 +38,4 @@ jobs:
         run: |
           cd example && python openfeature_example.py
         env:
-          DEVCYCLE_SERVER_SDK_KEY: dvc_server_token_hash
+          DEVCYCLE_SERVER_SDK_KEY: dvc_server_token_hash

.github/workflows/unit_test.yml

@@ -2,6 +2,9 @@ name: Unit Tests
 
 on: [push]
 
+permissions:
+  contents: read
+
 jobs:
   unit_tests:
     name: Unit Tests