Try with top-level permissions block

Author: greenc-FNAL

.github/workflows/clang-format-check.yaml

@@ -1,6 +1,10 @@
 name: Clang-Format Check
 run-name: "${{ github.actor }} checking code format"
 
+permissions:
+  contents: read
+  pull-requests: read
+
 on:
   pull_request:
     branches: [ main ]

.github/workflows/cmake-format-check.yaml

@@ -6,6 +6,9 @@ on:
     branches: [ main ]
   workflow_dispatch:
 
+  permissions:
+    contents: read
+
 jobs:
   detect-cmake-format-changes:
     runs-on: ubuntu-latest