add token permissions

.github/dependabot.yaml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/_build.yaml

@@ -8,6 +8,8 @@
 
 name: Build
 
+permissions: read-all
+
 on:
   workflow_call:
     inputs:

.github/workflows/_build_doc.yaml

@@ -7,6 +7,8 @@
 
 name: Build Doc
 
+permissions: read-all
+
 on:
   workflow_call:
     inputs:

.github/workflows/_codecov.yaml

@@ -8,6 +8,8 @@
 
 name: CodeCov
 
+permissions: read-all
+
 on:
   workflow_call:
     inputs:

.github/workflows/_codeql.yaml

@@ -12,6 +12,8 @@
 
 name: CodeQL
 
+permissions: read-all
+
 on:
   workflow_call:
 

.github/workflows/_pre_commit.yaml

@@ -7,6 +7,8 @@
 
 name: Pre-Commit
 
+permissions: read-all
+
 on:
   workflow_call:
 

.github/workflows/_pypi_publish.yaml

@@ -9,6 +9,8 @@
 
 name: PyPI Publish
 
+permissions: read-all
+
 on:
   workflow_call:
     inputs:

.github/workflows/_test.yaml

@@ -7,6 +7,8 @@
 
 name: Test Spot
 
+permissions: read-all
+
 on:
   workflow_call:
     inputs:

.github/workflows/cicd.yaml

@@ -7,6 +7,8 @@
 
 name: CI/CD
 
+permissions: read-all
+
 on:
   push:
     branches:

README.md

@@ -18,11 +18,9 @@
 
 </div>
 
-This Python module serves as a collection of different scale- and
+This Python module serves as collection of different scale- and
 distribution-based bias correction techniques for climate sciences.
 
-The documentation is available at: [https://python-cmethods.readthedocs.io/en/stable/](https://python-cmethods.readthedocs.io/en/stable/)
-
 Please cite this project as described in
 https://zenodo.org/doi/10.5281/zenodo.7652755.