Define default workflow permissions

Author: gapple

.github/workflows/php.yml

@@ -1,5 +1,8 @@
 name: Build
 
+permissions:
+  contents: read
+
 on:
   push:
     branches:
@@ -9,6 +12,7 @@ on:
       - v[0-9]+.[0-9]+.[0-9]+
   pull_request:
   workflow_dispatch:
+
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/phpmd.yml

@@ -1,20 +1,8 @@
-# This workflow uses actions that are not certified by GitHub.
-# They are provided by a third-party and are governed by
-# separate terms of service, privacy policy, and support
-# documentation.
-# PHPMD is a spin-off project of PHP Depend and
-# aims to be a PHP equivalent of the well known Java tool PMD.
-# What PHPMD does is: It takes a given PHP source code base
-# and look for several potential problems within that source.
-# These problems can be things like:
-#   Possible bugs
-#   Suboptimal code
-#   Overcomplicated expressions
-#   Unused parameters, methods, properties
-# More details at https://phpmd.org/
-
 name: PHPMD
 
+permissions:
+  contents: read
+
 on:
   push:
     branches: [ "develop" ]
@@ -24,9 +12,6 @@ on:
   schedule:
     - cron: '26 2 * * 0'
 
-permissions:
-  contents: read
-
 jobs:
   PHPMD:
     name: Run PHPMD scanning