Use explicit write permissions (#1404)

* Use explicit write permissions

* Revert "release: cargo-binstall v1.4.1 (#1403)"

This reverts commit 00941d8b43.

.github/workflows/release-cli.yml

@@ -17,6 +17,8 @@ on:
 
 jobs:
   tag:
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
@@ -66,6 +68,8 @@ jobs:
 
   publish:
     needs: package
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4

.github/workflows/release-packages.yml

@@ -41,6 +41,8 @@ jobs:
 
     name: ${{ matrix.t }}
     runs-on: ${{ matrix.o }}
+    permissions:
+      contents: write
     env:
       CARGO_BUILD_TARGET: ${{ matrix.t }}
       GLIBC_VERSION: ${{ matrix.g }}
@@ -125,6 +127,8 @@ jobs:
   lipo:
     needs: build
     name: universal-apple-darwin
+    permissions:
+      contents: write
     runs-on: macos-latest
     env:
       JUST_FOR_RELEASE: true

.github/workflows/release.yml

@@ -25,6 +25,8 @@ jobs:
   release-lib:
     if: needs.info.outputs.is-release == 'true' && needs.info.outputs.crate != 'cargo-binstall'
     needs: info
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4