fix yamllint

Author: tac0turtle

.github/actions/rust-setup/action.yml

@@ -1,21 +1,21 @@
-name: 'Setup Rust'
-description: 'Setup Rust toolchain with caching and protoc'
+name: "Setup Rust"
+description: "Setup Rust toolchain with caching and protoc"
 inputs:
   toolchain:
-    description: 'Rust toolchain to install'
+    description: "Rust toolchain to install"
     required: false
-    default: 'stable'
+    default: "stable"
   components:
-    description: 'Rust components to install'
+    description: "Rust components to install"
     required: false
-    default: ''
+    default: ""
   cache-key:
-    description: 'Additional cache key for dependencies'
+    description: "Additional cache key for dependencies"
     required: false
-    default: 'default'
+    default: "default"
 
 runs:
-  using: 'composite'
+  using: "composite"
   steps:
     - name: Install Rust toolchain
       uses: dtolnay/rust-toolchain@master
@@ -48,4 +48,4 @@ runs:
       run: |
         rustc --version
         cargo --version
-        protoc --version
+        protoc --version

.github/workflows/rust-ci-status.yml

@@ -10,15 +10,17 @@ jobs:
   status:
     name: Update CI Status
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     if: github.event.workflow_run.conclusion != 'skipped'
     steps:
       - name: Report status
         run: |
           echo "Workflow: ${{ github.event.workflow_run.name }}"
           echo "Status: ${{ github.event.workflow_run.conclusion }}"
           echo "Branch: ${{ github.event.workflow_run.head_branch }}"
-          
+
           if [ "${{ github.event.workflow_run.conclusion }}" != "success" ]; then
             echo "::error::Rust CI workflow failed"
             exit 1
-          fi
+          fi

.github/workflows/rust-proto-check.yml

@@ -11,6 +11,8 @@ on:
     branches:
       - main
       - release/*
+permissions:
+  contents: read
 
 jobs:
   check-proto-generation:

.github/workflows/rust-publish.yml

@@ -95,4 +95,4 @@ jobs:
 
             See the [README](https://github.com/rollkit/rollkit/tree/main/client/crates/rollkit-client) for usage examples.
           draft: false
-          prerelease: false
+          prerelease: false

.github/workflows/rust-test.yml

@@ -1,4 +1,6 @@
 name: Rust Tests
+permissions:
+  contents: read
 
 on:
   pull_request:
@@ -85,4 +87,4 @@ jobs:
           files: lcov.info
           flags: rust
           fail_ci_if_error: false
-          token: ${{ secrets.CODECOV_TOKEN }}
+          token: ${{ secrets.CODECOV_TOKEN }}