Merge pull request #305 from github/jhongturney/resolve-codeql-warnings

Resolve codeql warnings

.github/workflows/main.yml

@@ -8,6 +8,8 @@ jobs:
       RUBOCOP_TEST: false
       RSPEC_TEST: true
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     strategy:
       fail-fast: false
       matrix:
@@ -27,6 +29,8 @@ jobs:
       RUBOCOP_TEST: false
       RSPEC_TEST: true
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     strategy:
       fail-fast: false
       matrix:
@@ -46,6 +50,8 @@ jobs:
       RUBOCOP_TEST: false
       RSPEC_TEST: true
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     strategy:
       fail-fast: false
       matrix:
@@ -65,6 +71,8 @@ jobs:
       RUBOCOP_TEST: false
       RSPEC_TEST: true
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     strategy:
       fail-fast: false
       matrix:

.github/workflows/release.yml

@@ -15,7 +15,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@a6e6f86333f0a2523ece813039b8b4be04560854 # v1.190.0
         with:
           ruby-version: '2.6'
       - run: bundle install