Cleaning up some code scanning issues

Author: crimsonknave

.github/workflows/package-quality-control.yaml

@@ -11,6 +11,8 @@ on:
 jobs:
   # Checks that version number has been updated
   package-quality-control:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Current PR Branch
@@ -19,7 +21,7 @@ jobs:
         uses: actions/setup-python@v5
       - name: Check for Changed Files
         id: changed-files
-        uses: tj-actions/changed-files@v44
+        uses: tj-actions/changed-files@635f118699dd888d737c15018cd30aff2e0274f8
         with:
           files: |
             pyproject.toml

.github/workflows/pyright.yaml

@@ -5,6 +5,8 @@ on:
 
 jobs:
   pyright:
+    permissions:
+      contents: read
 
     runs-on: ubuntu-latest
     steps:
@@ -19,4 +21,4 @@ jobs:
         hatch env create dev
     - run: echo "$(hatch env find dev)/bin" >> $GITHUB_PATH
     - name: Run pyright
-      uses: jakebailey/pyright-action@v2.3.1
+      uses: jakebailey/pyright-action@vb5d50e5cde6547546a5c4ac92e416a8c2c1a1dfe

.github/workflows/pytest.yaml

@@ -8,6 +8,8 @@ on:
 
 jobs:
   pytest:
+    permissions:
+      contents: read
 
     runs-on: ${{ matrix.os }}
     strategy:

.github/workflows/ruff.yaml

@@ -5,6 +5,8 @@ on:
 
 jobs:
   ruff:
+    permissions:
+      contents: read
 
     runs-on: ubuntu-latest
     steps: