Comply with OpenSSF enforcement

Author: AndresGuzman-Ballen

.github/workflows/build_and_run.yml

@@ -4,6 +4,9 @@
 
 name: build and run
 
+# Declare default permissions as read only.
+permissions: read-all
+
 on:
   pull_request:
 

.github/workflows/conda-package.yml

@@ -4,6 +4,9 @@
 
 name: Conda package
 
+# Declare default permissions as read only.
+permissions: read-all
+
 on:
   push:
     branches:

.github/workflows/pre-commit.yml

@@ -4,6 +4,9 @@
 
 name: pre-commit
 
+# Declare default permissions as read only.
+permissions: read-all
+
 on:
   pull_request: