From 603b2800f7fa61947b35419f1a5a33e265792001 Mon Sep 17 00:00:00 2001
From: bjorn3 <17426603+bjorn3@users.noreply.github.com>
Date: Tue, 2 Apr 2024 15:17:56 +0000
Subject: [PATCH] Revoke all permissions from GHA workflows where possible

---
 .github/workflows/abi-cafe.yml | 2 ++
 .github/workflows/main.yml     | 2 ++
 .github/workflows/rustc.yml    | 2 ++
 3 files changed, 6 insertions(+)

diff --git a/.github/workflows/abi-cafe.yml b/.github/workflows/abi-cafe.yml
index e6bf944f552..a745f2801cc 100644
--- a/.github/workflows/abi-cafe.yml
+++ b/.github/workflows/abi-cafe.yml
@@ -3,6 +3,8 @@ name: Abi-cafe
 on:
   - push
 
+permissions: {}
+
 jobs:
   abi_cafe:
     runs-on: ${{ matrix.os }}
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 504add29349..8488f437f85 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -8,6 +8,8 @@ defaults:
   run:
     shell: bash
 
+permissions: {}
+
 jobs:
   rustfmt:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/rustc.yml b/.github/workflows/rustc.yml
index 930d025b73e..75ea94ee797 100644
--- a/.github/workflows/rustc.yml
+++ b/.github/workflows/rustc.yml
@@ -3,6 +3,8 @@ name: Various rustc tests
 on:
   - push
 
+permissions: {}
+
 jobs:
   bootstrap_rustc:
     runs-on: ubuntu-latest