From f72b3a25c6fd40f9215d5c2f3daf2b59bf58f7e1 Mon Sep 17 00:00:00 2001
From: Luc Berger <lberge@sandia.gov>
Date: Thu, 3 Oct 2024 19:54:19 -0600
Subject: [PATCH] workflow: adding permissions in workflow files (#2357)

This should make the OSS scorecard a little happier?

Signed-off-by: Luc <lberge@sandia.gov>
---
 .github/workflows/bdw.yml   | 3 +++
 .github/workflows/h100.yml  | 3 +++
 .github/workflows/mi210.yml | 3 +++
 .github/workflows/spr.yml   | 3 +++
 4 files changed, 12 insertions(+)

diff --git a/.github/workflows/bdw.yml b/.github/workflows/bdw.yml
index 657c180eec..c0a4d5a63c 100644
--- a/.github/workflows/bdw.yml
+++ b/.github/workflows/bdw.yml
@@ -3,6 +3,9 @@ name: Reusable BDW workflow
 on:
   workflow_call
 
+permissions:
+  contents: none
+
 jobs:
 #  PR_BDW_GNU1020_OPENMP_LEFT_REL_NOETI:
 #    name: PR_BDW_GNU1020_OPENMP_LEFT_REL_NOETI
diff --git a/.github/workflows/h100.yml b/.github/workflows/h100.yml
index 15665b673d..63f1c79aaa 100644
--- a/.github/workflows/h100.yml
+++ b/.github/workflows/h100.yml
@@ -3,6 +3,9 @@ name: Reusable H100 workflow
 on:
   workflow_call
 
+permissions:
+  contents: none
+
 jobs:
   PR_HOPPER90_CUDA1180_CUDA_LEFT_RIGHT_REL:
     name: PR_HOPPER90_CUDA1180_CUDA_LEFT_RIGHT_REL
diff --git a/.github/workflows/mi210.yml b/.github/workflows/mi210.yml
index 5a6da50763..c36351aebb 100644
--- a/.github/workflows/mi210.yml
+++ b/.github/workflows/mi210.yml
@@ -3,6 +3,9 @@ name: Reusable MI210 workflow
 on:
   workflow_call
 
+permissions:
+  contents: none
+
 jobs:
   PR_VEGA90A_ROCM561_HIP_SERIAL_LEFT:
     name: PR_VEGA90A_ROCM561_HIP_SERIAL_LEFT
diff --git a/.github/workflows/spr.yml b/.github/workflows/spr.yml
index bd4b06a7fc..37c4e01887 100644
--- a/.github/workflows/spr.yml
+++ b/.github/workflows/spr.yml
@@ -3,6 +3,9 @@ name: Reusable SPR workflow
 on:
   workflow_call
 
+permissions:
+  contents: none
+
 jobs:
   PR_SPR_ONEAPI202310_OPENMP_LEFT_MKLBLAS_MKLLAPACK_REL:
     name: PR_SPR_ONEAPI202310_OPENMP_LEFT_MKLBLAS_MKLLAPACK_REL