Some more CI tuning

Author: LebedevRI

.github/workflows/CI.yml

@@ -110,10 +110,10 @@ jobs:
       rust-toolchain-name: stable
       flavor: doc
   publish-pages:
+    if: github.event_name == 'push' && github.ref_type == 'branch' && github.ref_name == 'master'
     needs: build-docs
     runs-on: ubuntu-latest
     permissions:
-      contents: read
       pages: write
       id-token: write
     environment:

.github/workflows/rustfmt.yml

@@ -9,6 +9,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   rustfmt-check:
     uses: ./.github/workflows/CI-linux.yml
@@ -24,6 +26,8 @@ jobs:
   rustfmt-complain:
     needs: [ rustfmt-check ]
     if: always() && github.event_name == 'pull_request_target' && needs.rustfmt-check.outputs.rustfmt-artifact-url != ''
+    permissions:
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
       - name: Create comment

.github/workflows/validate-pr-source-and-target-branches.yml

@@ -8,6 +8,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
 
+permissions:
+  pull-requests: write
+
 jobs:
   validation:
     runs-on: ubuntu-latest
@@ -23,7 +26,7 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          cd rawspeed
+          cd rawspeed.rs
           gh pr close --comment "Pull Requests should only be submitted to `master` branch" ${{ github.event.number }}
           exit 1
       - name: Close Pull if PR is not from a proper branch
@@ -32,6 +35,6 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          cd rawspeed
+          cd rawspeed.rs
           gh pr close --comment "Pull Requests source branch should be branched off of the Pull Request's target branch" ${{ github.event.number }}
           exit 1