zizmor lints

Author: ocefpaf

.github/workflows/docs-linkchecker.yml

@@ -1,5 +1,8 @@
 name: Check linkrot
 
+# no permissions by default
+permissions: {}
+
 on:
   pull_request:
   push:
@@ -11,13 +14,15 @@ jobs:
 
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          fetch-depth: 0
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
         with:
           python-version: "3.x"
 
-
       - name: Linkcheck
         run: >
           set -e

.github/workflows/relock.yml

@@ -1,5 +1,8 @@
 name: relock
 
+# no permissions by default
+permissions: {}
+
 on:
   schedule:
     - cron: '0 0 1 * *'

.github/workflows/test-env.yml

@@ -1,5 +1,8 @@
 name: Test Environment
 
+# no permissions by default
+permissions: {}
+
 on:
   pull_request:
 
@@ -17,6 +20,9 @@ jobs:
 
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          fetch-depth: 0
+          persist-credentials: false
 
       - name: Setup Micromamba
         uses: mamba-org/setup-micromamba@7f29b8b80078b1b601dfa018b0f7425c587c63bb # v2.0.6

.github/workflows/test-install-instructions.yml

@@ -1,5 +1,8 @@
 name: Test Install instructions Section
 
+# no permissions by default
+permissions: {}
+
 on:
   pull_request:
 

.github/workflows/test_data_access_notebooks.yml

@@ -1,5 +1,8 @@
 name: Test Data Access Notebook
 
+# no permissions by default
+permissions: {}
+
 on:
   pull_request:
 
@@ -9,6 +12,9 @@ jobs:
 
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          fetch-depth: 0
+          persist-credentials: false
 
       - name: Setup Micromamba
         uses: mamba-org/setup-micromamba@7f29b8b80078b1b601dfa018b0f7425c587c63bb # v2.0.6

.github/workflows/test_data_analysis_and_visualization_notebooks.yml

@@ -1,5 +1,8 @@
 name: Test Data Analysis And Visualization Notebooks
 
+# no permissions by default
+permissions: {}
+
 on:
   pull_request:
 
@@ -9,6 +12,9 @@ jobs:
 
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          fetch-depth: 0
+          persist-credentials: false
 
       - name: Setup Micromamba
         uses: mamba-org/setup-micromamba@7f29b8b80078b1b601dfa018b0f7425c587c63bb # v2.0.6

.github/workflows/test_data_management_notebooks.yml

@@ -1,5 +1,8 @@
 name: Test Data Management Notebooks
 
+# no permissions by default
+permissions: {}
+
 on:
   pull_request:
 
@@ -9,6 +12,9 @@ jobs:
 
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          fetch-depth: 0
+          persist-credentials: false
 
       - name: Setup Micromamba
         uses: mamba-org/setup-micromamba@7f29b8b80078b1b601dfa018b0f7425c587c63bb # v2.0.6