Top level permissions can't be increased for specific jobs, hence setting the permission on each specific job on workflows that require more fine grain approach.
In addition it removes the pull-request permission as this is mostly required for PR decorators, read/write labels, etc.
Top level permissions can't be increased for specific jobs, hence setting the permission on each specific job on workflows that require more fine grain approach.
In addition it removes the pull-request permission as this is mostly required for PR decorators, read/write labels, etc.