From 94b8c1a45f571f535f650a7f14d472d5fd085b9a Mon Sep 17 00:00:00 2001
From: monosans <hsyqixco@protonmail.com>
Date: Wed, 10 Jun 2026 18:55:37 +0300
Subject: [PATCH] ci: refactor

---
 .github/workflows/allocator-bench.yml |  2 --
 .github/workflows/ci.yml              | 16 ++--------------
 2 files changed, 2 insertions(+), 16 deletions(-)

diff --git a/.github/workflows/allocator-bench.yml b/.github/workflows/allocator-bench.yml
index feec336..14820bf 100644
--- a/.github/workflows/allocator-bench.yml
+++ b/.github/workflows/allocator-bench.yml
@@ -10,8 +10,6 @@ jobs:
   bench:
     name: ${{ matrix.platform }} (tokio-multi-thread=${{ matrix.tokio_multi_thread }}, ${{ matrix.allocator }})
     runs-on: ${{ matrix.runner }}
-    permissions:
-      contents: read
     strategy:
       fail-fast: false
       matrix:
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e46a2c3..2a37484 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -7,6 +7,8 @@ on:
 concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
+permissions:
+  contents: read
 jobs:
   check:
     if: ${{ always() && github.event_name == 'pull_request' }}
@@ -229,8 +231,6 @@ jobs:
           #   cross: true
       fail-fast: false
     runs-on: ${{ matrix.runner }}
-    permissions:
-      contents: read
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
@@ -330,8 +330,6 @@ jobs:
     needs:
       - upload-docker-manifest
     runs-on: ubuntu-24.04
-    permissions:
-      contents: read
     strategy:
       matrix:
         platform:
@@ -382,8 +380,6 @@ jobs:
           - "s390x"
       fail-fast: false
     runs-on: ubuntu-24.04
-    permissions:
-      contents: read
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
@@ -399,8 +395,6 @@ jobs:
           include-hidden-files: true
   clippy:
     runs-on: ubuntu-24.04
-    permissions:
-      contents: read
     strategy:
       matrix:
         include:
@@ -470,8 +464,6 @@ jobs:
       - run: cargo +beta clippy --all-targets ${{ matrix.features }} -- -Dwarnings
   pre-commit:
     runs-on: ubuntu-24.04
-    permissions:
-      contents: read
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
@@ -483,8 +475,6 @@ jobs:
       - run: uv tool run --exclude-newer '3 days' --no-cache prek run --all-files --show-diff-on-failure
   rustfmt:
     runs-on: ubuntu-24.04
-    permissions:
-      contents: read
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
@@ -497,8 +487,6 @@ jobs:
       - run: cargo +nightly fmt --check
   udeps:
     runs-on: ubuntu-24.04
-    permissions:
-      contents: read
     strategy:
       matrix:
         features: