best practices: ossf scorecard: Fix token permissions

Signed-off-by: John Andersen <[email protected]>

.github/workflows/alice_async_comms.yml

@@ -11,6 +11,8 @@ on:
   schedule:
   - cron:  '0 6 * * *'
 
+permissions:
+  contents: read
 
 jobs:
   posts:

.github/workflows/dffml_build_images_containers.yml

@@ -25,6 +25,9 @@ on:
       - "**/*Dockerfile"
       - "**/*.manifest.json"
 
+permissions:
+  contents: read
+
 jobs:
   manifest:
     runs-on: ubuntu-latest

.github/workflows/dispatch_build_images_containers.yml

@@ -3,6 +3,9 @@
 # - https://docs.github.com/en/actions/using-workflows/reusing-workflows#calling-a-reusable-workflow
 name: "Dispatch: Build: Images: Containers"
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
     inputs:

.github/workflows/testing.yml

@@ -1,5 +1,8 @@
 name: Tests
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch: null
   push: