Add top level read-all token permission to workflows (#1354)

* Add top level read-all token permission to workflows

* Restrict perms for tests to contents: read

* Remove derelict scripts

* Add badges

* Final badge links

.github/workflows/rstcheck.yml

@@ -15,6 +15,9 @@ on:
       - "docs/**"
       - "ci/rstcheck/*"
 
+permissions:
+  contents: read
+
 jobs:
   rstcheck:
     name: rstcheck

.github/workflows/test_gdal_latest.yml

@@ -14,6 +14,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   test_gdal_latest:
     name: GDAL Latest

.github/workflows/tests.yml

@@ -10,7 +10,6 @@ on:
       - 'setup.cfg'
       - 'MANIFEST.in'
       - 'pyproject.toml'
-      - 'scripts/**'
       - 'fiona/**'
       - 'tests/**'
   pull_request:
@@ -22,12 +21,14 @@ on:
       - 'setup.cfg'
       - 'MANIFEST.in'
       - 'pyproject.toml'
-      - 'scripts/**'
       - 'fiona/**'
       - 'tests/**'
   schedule:
     - cron:  '0 0 * * 0'
 
+permissions:
+  contents: read
+
 jobs:
   docker_tests:
     runs-on: ubuntu-latest

README.rst

@@ -2,8 +2,12 @@
 Fiona
 =====
 
-.. image:: https://github.com/Toblerity/Fiona/workflows/Tests/badge.svg?branch=main
-   :target: https://github.com/Toblerity/Fiona/actions?query=branch%3Amain
+.. image:: https://github.com/Toblerity/Fiona/actions/workflows/tests.yml/badge.svg
+   :target: https://github.com/Toblerity/Fiona/actions/workflows/tests.yml
+.. image:: https://github.com/Toblerity/Fiona/actions/workflows/test_gdal_latest.yml/badge.svg
+   :target: https://github.com/Toblerity/Fiona/actions/workflows/test_gdal_latest.yml
+.. image:: https://img.shields.io/pypi/v/fiona
+   :target: https://pypi.org/project/fiona/
 
 Fiona streams simple feature data to and from GIS formats like GeoPackage and
 Shapefile.