Limit privilege escalation and token theft in workflows#3742

d-v-b merged 2 commits intozarr-developers:mainzarr-developers/zarr-python:mainfrom

DimitriPapadopoulos:weak_GitHub_Actions_configurationDimitriPapadopoulos/zarr-python:weak_GitHub_Actions_configurationCopy head branch name to clipboard