Remedy token permission issue

.github/workflows/docs.yml

@@ -5,6 +5,9 @@ on:
     branches:
       - develop
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   Build-Docs:
     runs-on: ubuntu-20.04

.github/workflows/docs_stable.yml

@@ -4,6 +4,9 @@ on:
   release:
     types: [published]
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   Build-Docs:
     runs-on: ubuntu-20.04

.github/workflows/perf-accuracy.yml

@@ -34,6 +34,9 @@ on:
           - optimize
         default: optimize
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   Perf-Accuracy-Benchmark:
     strategy:

.github/workflows/perf-speed.yml

@@ -34,6 +34,9 @@ on:
           - optimize
         default: optimize
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   Perf-Speed-Benchmark:
     name: Perf-Speed-Benchmark-all-py310

.github/workflows/publish.yml

@@ -44,7 +44,8 @@ jobs:
     needs: [build_wheels, build_sdist]
     environment: pypi
     runs-on: ubuntu-latest
-    permissions: write-all
+    permissions:
+      packages: write
     steps:
       - name: Download artifacts
         uses: actions/download-artifact@v3

.github/workflows/scorecard.yml

@@ -13,7 +13,6 @@ on:
     - cron: "0 18 * * 6"
   push:
     branches: ["develop"]
-  workflow_dispatch: # run on request (no need for PR)
 
 # Declare default permissions as read only.
 permissions: read-all