Merge branch 'MDAnalysis:develop' into develop

.github/workflows/linters.yaml

@@ -3,7 +3,7 @@ on:
   push:
     branches:
       - develop
-  pull_request:
+  pull_request_target:
     branches:
       - develop
 
@@ -14,6 +14,22 @@ concurrency:
   group: "${{ github.ref }}-${{ github.head_ref }}-${{ github.workflow }}"
   cancel-in-progress: true
 
+permissions:
+  # try to lock things down as much as possible
+  actions: read
+  checks: read
+  contents: read
+  deployments: read
+  discussions: read
+  id-token: none
+  issues: read
+  packages: read
+  pages: read
+  pull-requests: read
+  repository-projects: read
+  security-events: read
+  statuses: read
+
 defaults:
   run:
     shell: bash -l {0}
@@ -24,6 +40,8 @@ jobs:
       github.repository == 'MDAnalysis/mdanalysis' &&
       github.event_name == 'pull_request'
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     defaults:
       run:
         shell: bash