Add missing token permissions (#2824)

Author: trask

.github/workflows/build.yml

@@ -8,10 +8,21 @@ on:
   merge_group:
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
   cancel-in-progress: true
 
 jobs:
   markdown-link-check:
-    uses: ./.github/workflows/reusable-markdown-link-check.yml
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Run markdown-link-check
+        run: make markdown-link-check
+        env:
+          # see https://lychee.cli.rs/troubleshooting/rate-limits/#github-rate-limiting
+          GITHUB_TOKEN: ${{ github.token }}

.github/workflows/issue-management-feedback-label.yml

@@ -4,8 +4,14 @@ on:
   issue_comment:
     types: [created]
 
+permissions:
+  contents: read
+
 jobs:
   issue_comment:
+    permissions:
+      issues: write
+      pull-requests: write
     if: >
       contains(github.event.issue.labels.*.name, 'needs author feedback') &&
       github.event.comment.user.login == github.event.issue.user.login