SEC: disable default gha permissions

Author: neutrinoceros

.github/workflows/idefix-ci-doc.yml

@@ -9,6 +9,7 @@ on:
     paths-ignore:
       - '.github/ISSUE_TEMPLATE/*'
 
+permissions: {}
 
 jobs:
   ReadTheDocs:

.github/workflows/idefix-ci-jobs.yml

@@ -21,6 +21,8 @@ env:
   PYTHONPATH: ${{ github.workspace }}
   IDEFIX_DIR: ${{ github.workspace }}
 
+permissions: {}
+
 jobs:
   ShocksHydro:
     runs-on: self-hosted

.github/workflows/idefix-ci.yml

@@ -9,6 +9,8 @@ on:
     paths-ignore:
       - '.github/ISSUE_TEMPLATE/*'
 
+permissions: {}
+
 jobs:
   Linter:
     # Don't do this in forks