Fix pre-commit errors on SPEC8 (#335)

spec-0008/index.md

@@ -40,11 +40,11 @@ It is recommended that this is a dedicated page in the developer section of the
 
 ### Hardening workflow environment permissions
 
-* Workflows that publish release artifacts should have _run triggers_ that require intentional actions by the release team (e.g., `workflow_dispatch` in GitHub Actions) and require multiple release team members to approve the workflow to run (c.f. "Use GitHub Actions environments" section below).
-This is to safeguard the project from any one maintainer having the ability to commit to the default branch and make a release directly.
+- Workflows that publish release artifacts should have _run triggers_ that require intentional actions by the release team (e.g., `workflow_dispatch` in GitHub Actions) and require multiple release team members to approve the workflow to run (c.f. "Use GitHub Actions environments" section below).
+  This is to safeguard the project from any one maintainer having the ability to commit to the default branch and make a release directly.
 
-* It is also strongly recommended that the repository requires [signed commits](https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits) so that each release corresponds to a verified commit.
-* The branch from which the release is made should also be protected.
+- It is also strongly recommended that the repository requires [signed commits](https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits) so that each release corresponds to a verified commit.
+- The branch from which the release is made should also be protected.
 
 #### Restrict permissions in CI runners to the minimum required
 
@@ -62,12 +62,12 @@ Elevating permissions beyond this should be done at the job level by redefining
 GitHub allows restricting the actions that workflows can use via the repository actions permissions settings at `https://github.com/$ORG/$PROJECT/settings/actions`.
 A reasonable default is to select the
 
-* Allow $ORG, and select non-$ORG, actions and reusable workflows
+- Allow $ORG, and select non-$ORG, actions and reusable workflows
 
 option and the suboptions:
 
-* Allow actions created by GitHub
-* Allow specified actions and reusable workflows
+- Allow actions created by GitHub
+- Allow specified actions and reusable workflows
 
 Consult [Managing GitHub Actions permissions for your repository](https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#managing-github-actions-permissions-for-your-repository) for more details.