fix: Disable global permissions for actions (#153)

Author: nrayburn-tech

.github/workflows/build.yml

@@ -12,6 +12,8 @@
 #
 ## JBIJPPTPL
 
+permissions: {}
+
 name: Build
 on:
   # Trigger the workflow on pushes to only the 'main' branch (this avoids duplicate checks being run e.g., for dependabot pull requests)

.github/workflows/release.yml

@@ -2,6 +2,8 @@
 # Running the publishPlugin task requires all following secrets to be provided: PUBLISH_TOKEN, PRIVATE_KEY, PRIVATE_KEY_PASSWORD, CERTIFICATE_CHAIN.
 # See https://plugins.jetbrains.com/docs/intellij/plugin-signing.html for more information.
 
+permissions: {}
+
 name: Release
 on:
   release:

.github/workflows/run-ui-tests.yml

@@ -7,6 +7,8 @@
 #
 # Workflow is triggered manually.
 
+permissions: {}
+
 name: Run UI Tests
 on:
   workflow_dispatch