Fix an assumed permissions mismatch between the workflows uploading a…

…nd downloading artifacts.

.github/workflows/build.yml

@@ -1,5 +1,9 @@
 name: build
 
+permissions:
+  contents: write
+  actions: read
+
 on:
   pull_request:
     branches:
@@ -14,6 +18,8 @@ permissions:
 jobs:
   build-windows:
     runs-on: windows-2022
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -65,6 +71,8 @@ jobs:
 
   build-linux:
     runs-on: ubuntu-latest
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       # # Debug step to verify event context
       # - name: Print event context for build-linux
@@ -154,6 +162,8 @@ jobs:
   release:
     runs-on: ubuntu-latest
     needs: [build-windows, build-linux]
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
     continue-on-error: true
     steps:
@@ -200,6 +210,8 @@ jobs:
   homebrew:
     runs-on: ubuntu-latest
     needs: [release]
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
     continue-on-error: true
     steps:

.github/workflows/test-binaries-qemu.yml

@@ -1,5 +1,9 @@
 name: test-binaries-qemu
 
+permissions:
+  contents: read
+  actions: read
+
 on:
   workflow_run:
     workflows: [build]
@@ -9,6 +13,9 @@ on:
 jobs:
   test-x86_64:
     runs-on: ubuntu-22.04
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
     steps:
       # Debug step to list artifacts for the run
       - name: List available artifacts

.github/workflows/test-binaries.yml

@@ -1,5 +1,9 @@
 name: test-binaries
 
+permissions:
+  contents: read
+  actions: read
+
 on:
   workflow_run:
     workflows: [build]
@@ -10,6 +14,8 @@ jobs:
   test_binaries:
     name: Test Multi-Arch Binaries
     runs-on: ubuntu-22.04
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
     strategy:
       matrix: