Current Behavior
The workflows and the job(s) in them default to 'write' permissions set at the repository. Permissions for the GITHUB_TOKEN is not set individually at the workflow level.
Desired Behavior
Workflows permissions should default to 'read' and GITHUB_TOKEN permissions should be modified in workflow files to use privileged permissions as required.
Implementation
Acceptance Tests