[GEOPY-2161] another attempt to address report by Zizmor

Author: sebhmg

.github/workflows/python_deploy_dev.yml

@@ -9,14 +9,13 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref || github.run_id }}
   cancel-in-progress: true
 
-permissions:
-  contents: write
-  actions: read
-
 jobs:
   call-workflow-conda-publish:
     name: Publish development conda package on JFrog Artifactory
     uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-publish_rattler_package.yml@main
+    permissions:
+      contents: write  # to create draft release and attach artifacts
+      actions: read
     with:
       package-name: 'mira-simpeg'
       python-version: '3.10'
@@ -29,6 +28,9 @@ jobs:
   call-workflow-pypi-publish:
     name: Publish development pypi package (JFrog Artifactory, TestPyPI)
     uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-publish_pypi_package.yml@main
+    permissions:
+      contents: write  # to create draft release and attach artifacts
+      actions: read
     with:
       package-manager: 'setuptools'
       package-name: 'mira-simpeg'