chore: security for workflows (#16)

Author: basmasking

.github/workflows/nodejsci.yml

@@ -6,6 +6,7 @@ on:
 
 permissions:
   contents: read
+  id-token: none
 
 jobs:
   build:
@@ -19,6 +20,8 @@ jobs:
     steps:
     - name: ⚙️ Checkout Repository
       uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      with:
+        persist-credentials: false
 
     - name: Use Node.js ${{ matrix.node-version }}
       uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0

.github/workflows/publish.yml

@@ -9,10 +9,14 @@ permissions:
 
 jobs:
   publish:
+    environment:
+      name: release
     runs-on: ubuntu-latest
     steps:
     - name: ⚙️ Checkout Repository
       uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      with:
+        persist-credentials: false
 
     - name: 🛠️ Set up Node.js
       uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0