ci: Remove explicit permissions since repo is public

Author: kaylendog

.github/workflows/single_sdk_tests.yml

@@ -5,9 +5,7 @@
 name: "Complement Crypto"
 run-name: "Running Complement-Crypto"
 
-permissions:
-  contents: read
-  actions: read
+permissions: {}
 
 on:
   workflow_call:

.github/workflows/tests.yaml

@@ -1,8 +1,6 @@
 name: Tests
 
-permissions:
-  contents: read
-  actions: read
+permissions: {}
 
 on:
   push:
@@ -87,38 +85,38 @@ jobs:
           docker tag ghcr.io/matrix-org/synapse-service:v1.117.0 homeserver:latest
 
       # Build homeserver image, honouring branch names
-      #- name: "Checkout corresponding Synapse branch" 
-        #shell: bash 
-        #run: |  
-          #mkdir -p homeserver 
-#  
-          ## Attempt to use the version of the homeserver which best matches the 
-          ## current build.  
-          ## 
-          ## 1. If we are not on complement's default branch, check if there's a 
-          ##    similarly named branch (GITHUB_HEAD_REF for pull requests, 
-          ##    otherwise GITHUB_REF). 
-          ## 2. otherwise, use the default homeserver branch ("HEAD")  
-#  
-          #for BRANCH_NAME in "$GITHUB_HEAD_REF" "${GITHUB_REF#refs/heads/}" "HEAD"; do  
-            ## Skip empty branch names, merge commits, and our default branch. 
-            ## (If we are on complement's default branch, we want to fall through to the HS's default branch 
-            ## rather than using the HS's 'master'/'main').  
-            #case "$BRANCH_NAME" in  
-              #"" | refs/pull/* | main | master) 
-                #continue  
-                #;;  
-            #esac  
-            #(wget -O - "https://github.com/matrix-org/synapse/archive/$BRANCH_NAME.tar.gz" | tar -xz --strip-components=1 -C homeserver) && break 
-          #done  
-        ## Build the base Synapse dockerfile and then build a Complement-specific image from that base.  
-      #- run: |  
-          #docker build -t matrixdotorg/synapse:latest -f docker/Dockerfile .  
-          #docker build -t matrixdotorg/synapse-workers:latest -f docker/Dockerfile-workers .  
-          #docker build -t homeserver -f docker/complement/Dockerfile docker/complement  
-        #working-directory: homeserver 
-        #env:  
-          #DOCKER_BUILDKIT: 1  
+      #- name: "Checkout corresponding Synapse branch"
+      #shell: bash
+      #run: |
+      #mkdir -p homeserver
+      #
+      ## Attempt to use the version of the homeserver which best matches the
+      ## current build.
+      ##
+      ## 1. If we are not on complement's default branch, check if there's a
+      ##    similarly named branch (GITHUB_HEAD_REF for pull requests,
+      ##    otherwise GITHUB_REF).
+      ## 2. otherwise, use the default homeserver branch ("HEAD")
+      #
+      #for BRANCH_NAME in "$GITHUB_HEAD_REF" "${GITHUB_REF#refs/heads/}" "HEAD"; do
+      ## Skip empty branch names, merge commits, and our default branch.
+      ## (If we are on complement's default branch, we want to fall through to the HS's default branch
+      ## rather than using the HS's 'master'/'main').
+      #case "$BRANCH_NAME" in
+      #"" | refs/pull/* | main | master)
+      #continue
+      #;;
+      #esac
+      #(wget -O - "https://github.com/matrix-org/synapse/archive/$BRANCH_NAME.tar.gz" | tar -xz --strip-components=1 -C homeserver) && break
+      #done
+      ## Build the base Synapse dockerfile and then build a Complement-specific image from that base.
+      #- run: |
+      #docker build -t matrixdotorg/synapse:latest -f docker/Dockerfile .
+      #docker build -t matrixdotorg/synapse-workers:latest -f docker/Dockerfile-workers .
+      #docker build -t homeserver -f docker/complement/Dockerfile docker/complement
+      #working-directory: homeserver
+      #env:
+      #DOCKER_BUILDKIT: 1
       - name: "Run Complement-Crypto unit tests"
         env:
           COMPLEMENT_BASE_IMAGE: homeserver