Merge pull request #2772 from sashashura/patch-1

GitHub Workflows security hardening

.github/workflows/docs.yaml

@@ -3,8 +3,12 @@ on:
   push:
     branches:
       - master
+permissions: {}
 jobs:
   build_and_publish:
+    permissions:
+      contents: write # to push changes in repo (jamesives/github-pages-deploy-action)
+
     name: Build and publish Docs
     runs-on: ubuntu-latest
     if: github.repository == 'PHPMailer/PHPMailer'

.github/workflows/tests.yml

@@ -6,6 +6,9 @@ on:
   # Allow manually triggering the workflow.
   workflow_dispatch:
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
 
   coding-standard: