[gnu] externals/transient 2902b29ace: ci: Reduce permissions and add zizmor setting

[Jonas Bernoulli via]

branch: externals/transient
commit 2902b29ace6f75f7da83f692d2bf5bc3b2d0e3ae
Author: Jonas Bernoulli <jo...@bernoul.li>
Commit: Jonas Bernoulli <jo...@bernoul.li>

    ci: Reduce permissions and add zizmor setting
---
 .github/workflows/compile.yml | 4 +++-
 .github/workflows/manual.yml  | 4 +++-
 .github/workflows/stats.yml   | 4 +++-
 .github/workflows/test.yml    | 4 +++-
 4 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/compile.yml b/.github/workflows/compile.yml
index 2c1a9879ba..2102237334 100644
--- a/.github/workflows/compile.yml
+++ b/.github/workflows/compile.yml
@@ -3,4 +3,6 @@ on: [push, pull_request]
 jobs:
   compile:
     name: Compile
-    uses: emacscollective/workflows/.github/workflows/compile.yml@main
+    uses: | # zizmor: ignore[unpinned-uses] same maintainer as this repo
+      emacscollective/workflows/.github/workflows/compile.yml@main
+    permissions: {}
diff --git a/.github/workflows/manual.yml b/.github/workflows/manual.yml
index 2a655ae46d..e69a6ce475 100644
--- a/.github/workflows/manual.yml
+++ b/.github/workflows/manual.yml
@@ -6,6 +6,8 @@ on:
 jobs:
   manual:
     name: Manual
-    uses: emacscollective/workflows/.github/workflows/manual.yml@main
+    uses: | # zizmor: ignore[unpinned-uses] same maintainer as this repo
+      emacscollective/workflows/.github/workflows/manual.yml@main
+    permissions: {}
     secrets:
       rclone_config: ${{ secrets.RCLONE_CONFIG }}
diff --git a/.github/workflows/stats.yml b/.github/workflows/stats.yml
index 5597fb9732..bff434ab66 100644
--- a/.github/workflows/stats.yml
+++ b/.github/workflows/stats.yml
@@ -7,6 +7,8 @@ on:
 jobs:
   stats:
     name: Statistics
-    uses: emacscollective/workflows/.github/workflows/stats.yml@main
+    uses: | # zizmor: ignore[unpinned-uses] same maintainer as this repo
+      emacscollective/workflows/.github/workflows/stats.yml@main
+    permissions: {}
     secrets:
       rclone_config: ${{ secrets.RCLONE_CONFIG }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 01d105e40f..a7c53ad6f2 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -3,4 +3,6 @@ on: [push, pull_request]
 jobs:
   test:
     name: Test
-    uses: emacscollective/workflows/.github/workflows/test.yml@main
+    uses: | # zizmor: ignore[unpinned-uses] same maintainer as this repo
+      emacscollective/workflows/.github/workflows/test.yml@main
+    permissions: {}