From 5781448cbe4a1c13d9aa5a181bab3735c09a028d Mon Sep 17 00:00:00 2001
From: Max Goedjen <max.goedjen@gmail.com>
Date: Wed, 3 Sep 2025 23:43:02 -0700
Subject: [PATCH] Cleanup workflows and limit a few jobs to read.

---
 .github/workflows/nightly.yml | 1 -
 .github/workflows/release.yml | 6 +++---
 .github/workflows/test.yml    | 3 ++-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index dc61369..16b8178 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -7,7 +7,6 @@ on:
   
 jobs:
   build:
-#     runs-on: macOS-latest
     runs-on: macos-15
     permissions:
       id-token: write
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index da81788..9d69dfa 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -6,7 +6,8 @@ on:
       - '*'
 jobs:
   test:
-#     runs-on: macOS-latest
+    permissions:
+        contents: read
     runs-on: macos-15
     timeout-minutes: 10
     steps:
@@ -25,12 +26,11 @@ jobs:
     - name: Test
       run: swift test --build-system swiftbuild --package-path Sources/Packages
   build:
-#     runs-on: macOS-latest
-    runs-on: macos-15
     permissions:
       id-token: write
       contents: write
       attestations: write
+    runs-on: macos-15
     timeout-minutes: 10
     steps:
     - uses: actions/checkout@v5
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index e790e2f..2fb5150 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -3,7 +3,8 @@ name: Test
 on: [push, pull_request]
 jobs:
   test:
-#     runs-on: macOS-latest
+    permissions:
+        contents: read
     runs-on: macos-15
     timeout-minutes: 10
     steps: