From 9cba438b3145dcd88cd53c48ccf81c983948ac32 Mon Sep 17 00:00:00 2001
From: Brian Ingenito <28159742+bingenito@users.noreply.github.com>
Date: Fri, 8 Mar 2024 13:16:21 -0500
Subject: [PATCH] chore(actions): update default token permissions to read

---
 .github/workflows/deploy-site.yml | 5 ++++-
 .github/workflows/release.yml     | 4 ++--
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/deploy-site.yml b/.github/workflows/deploy-site.yml
index 7bc1d9a83..a39a81024 100644
--- a/.github/workflows/deploy-site.yml
+++ b/.github/workflows/deploy-site.yml
@@ -10,12 +10,15 @@ defaults:
     working-directory: ./site
 
 permissions:
-  contents: write
+  contents: read
 
 jobs:
   build:
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: write
+
     steps:
       - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Use Node.js ${{ matrix.node-version }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4d5c206e6..636d109ba 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -7,7 +7,7 @@ on:
   workflow_dispatch:
 
 permissions:
-  contents: write
+  contents: read
   actions: read
 
 name: Release
@@ -19,7 +19,7 @@ jobs:
     name: Upload Release Asset
     needs: build
     runs-on: windows-latest
-  
+
     steps:
 
       # Using shared artifact from build workflow