Add default permissions to workflows

.github/workflows/build.yml

@@ -18,6 +18,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
 
   build:

.github/workflows/global.yaml

@@ -9,6 +9,9 @@ on:
       - '!**/docs/**/*'
       - '!**/*.md'
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   copyright:
     runs-on: ubuntu-latest

.github/workflows/markdown.yml

@@ -6,6 +6,10 @@ on:
       - '.github/markdownlint.json'
       - '.github/markdownlint.jsonc'
       - '**/*.md'
+
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   markdown-lint:
     name: Lint markdown files

.github/workflows/release.yml

@@ -5,6 +5,9 @@ on:
     tags:
       - "v*"
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   goreleaser:
     runs-on: ubuntu-latest

.github/workflows/test.yml

@@ -18,6 +18,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   lint:
     name: Lint

.github/workflows/tpip-check.yml

@@ -14,6 +14,9 @@ on:
 env:
   tpip_report: "third_party_licenses.md"
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   check-licenses:
     runs-on: ubuntu-latest

go.mod

@@ -1,6 +1,6 @@
 module cbuild
 
-go 1.20
+go 1.21
 
 require (
 	github.com/otiai10/copy v1.9.0