fix(workflows): default to disabled permissions

.github/workflows/composer-install.yml

@@ -8,7 +8,7 @@ on:
       - "composer.json"
       - "composer.lock"
 
-permissions: read-all
+permissions: {}
 
 jobs:
   ComposerInstall:

.github/workflows/compress-images.yml

@@ -8,7 +8,7 @@ on:
   schedule:
     - cron: "00 23 * * 0"
 
-permissions: read-all
+permissions: {}
 
 jobs:
   CompressOnDemandOrSchedule:

.github/workflows/dependency-review.yml

@@ -12,7 +12,7 @@ name: "Dependency Review"
 
 on: [pull_request]
 
-permissions: read-all
+permissions: {}
 
 jobs:
   dependency-review:

.github/workflows/laravel-phpunit.yml

@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main]
 
-permissions: read-all
+permissions: {}
 
 jobs:
   laravel-tests:

.github/workflows/pr-compress-images.yml

@@ -11,7 +11,7 @@ on:
       - "**.png"
       - "**.webp"
 
-permissions: read-all
+permissions: {}
 
 jobs:
   CompressInPR:

.github/workflows/pr-lint.yml

@@ -24,7 +24,7 @@ on:
   pull_request:
     branches: [master, main]
 
-permissions: read-all
+permissions: {}
 
 ###############
 # Set the Job #

.github/workflows/release-drafter.yml

@@ -4,7 +4,7 @@ name: Release Drafter
 on:
   workflow_call:
 
-permissions: read-all
+permissions: {}
 
 jobs:
   update_release_draft:

.github/workflows/release-monthly.yaml

@@ -7,7 +7,7 @@ on:
   schedule:
     - cron: "0 0 1 * *" # 1st of every month at midnight
 
-permissions: read-all
+permissions: {}
 
 jobs:
   release:

.github/workflows/reviewdog-linters.yml

@@ -3,7 +3,7 @@ name: Reviewdog Linters
 
 on: [push]
 
-permissions: read-all
+permissions: {}
 
 jobs:
   linters:

.github/workflows/stale.yml

@@ -7,7 +7,7 @@ on:
   workflow_call:
   workflow_dispatch:
 
-permissions: read-all
+permissions: {}
 
 jobs:
   stale:

.github/workflows/sync-labels-to-own-projects.yml

@@ -12,7 +12,7 @@ on:
   schedule:
     - cron: "0 0 * * *" # Every day at midnight
 
-permissions: read-all
+permissions: {}
 
 jobs:
   sync-labels:

.github/workflows/sync-labels.yml

@@ -13,7 +13,7 @@ on:
   workflow_call:
   workflow_dispatch:
 
-permissions: read-all
+permissions: {}
 
 jobs:
   labels: