Merge pull request #219 from jplock/jp-wf-perms

[fix] add GHA permissions

Author: jplock

.github/workflows/docker-bake.yml

@@ -1,5 +1,8 @@
 name: docker bake
 
+permissions:
+  contents: read
+
 on:
   push:
     branches:

.github/workflows/rust.yml

@@ -1,5 +1,8 @@
 name: rust tests
 
+permissions:
+  contents: read
+
 on:
   push:
     branches:

.github/workflows/secure_workflows.yml

@@ -26,8 +26,6 @@ jobs:
     name: Harden Security
     if: github.repository_owner == 'aws-samples'
     runs-on: ubuntu-latest
-    permissions:
-      contents: read  # checkout code and subsequently GitHub action workflows
     steps:
       - name: Checkout code
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8  # v5.0.0