we don't use these actions, but keep pedantic zizmor happy

Author: nedbat

.github/workflows/past-events.yml

@@ -27,7 +27,7 @@ jobs:
     # The type of runner that the job will run on
     runs-on: ubuntu-latest
     permissions:
-      contents: write
+      contents: write # This will update pages in the repo
 
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:

.github/workflows/preview.yml

@@ -23,10 +23,8 @@ jobs:
     name: "Build PR preview"
     runs-on: ubuntu-latest
     permissions:
-      # contents: write is required for deploying the GitHub Pages if using the default GITHUB_TOKEN
-      # pull-requests: write is required if you want to comment the preview page url to the pull request
-      pull-requests: write
-      contents: write
+      pull-requests: write  # required to comment the preview page url to the pull request
+      contents: write       # required for deploying the GitHub Pages if using the default GITHUB_TOKEN
     steps:
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2