Update permissions

.github/workflows/dev-tools.yml

@@ -15,6 +15,8 @@ permissions: read-all
 jobs:
   update_readme:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Check out repository
         uses: actions/checkout@v4
@@ -44,8 +46,6 @@ jobs:
       # yamllint disable rule:line-length
       - name: Commit updated bandit.json
         id: commit_bandit
-        permissions:
-          contents: write
         run: |
           git add resources/bandit.json
           git config --local user.email "github-actions[bot]@users.noreply.github.com"
@@ -65,8 +65,6 @@ jobs:
       # yamllint disable rule:line-length
       - name: Commit updated README.md
         id: commit_readme
-        permissions:
-          contents: write
         run: |
           git add README.md
           git config --local user.email "github-actions[bot]@users.noreply.github.com"
@@ -88,8 +86,6 @@ jobs:
       # yamllint disable rule:line-length
       - name: Commit updated resources/coverage.txt resources/coverage.svg
         id: commit
-        permissions:
-          contents: write
         run: |
           git add resources/coverage.txt resources/coverage.svg
           git config --local user.email "github-actions[bot]@users.noreply.github.com"
@@ -104,8 +100,6 @@ jobs:
 
       # yamllint disable rule:line-length
       - name: Push changes
-        permissions:
-          contents: write
         if: env.commit_status == 'committed' && github.actor != 'dependabot[bot]'
         uses: ad-m/github-push-action@master
         with: