fix: configure gh workflow permission (#5909)

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

.github/workflows/cli.yaml

@@ -17,6 +17,9 @@ on:
       - 'README.md'
       - '.github/config.yml'
 
+permissions:
+  contents: read
+
 jobs:
   cli-test:
     runs-on: ubuntu-latest

.github/workflows/codecov.yaml

@@ -10,6 +10,9 @@ on:
       - 'main'
       - 'release*'
 
+permissions:
+  contents: read
+
 jobs:
   codecov:
     runs-on: ubuntu-latest

.github/workflows/fossa.yml

@@ -8,6 +8,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest

.github/workflows/nancy.yaml

@@ -6,6 +6,9 @@ on:
       - 'main'
       - 'release*'
 
+permissions:
+  contents: read
+
 jobs:
   nancy:
     runs-on: ubuntu-latest

.github/workflows/sonarcloud.yaml

@@ -6,6 +6,9 @@ on:
       - 'main'
       - 'release*'
 
+permissions:
+  contents: read
+
 jobs:
   sonarcloud:
     runs-on: ubuntu-latest

.github/workflows/verify-codegen.yaml

@@ -10,6 +10,9 @@ on:
       - 'main'
       - 'release*'
 
+permissions:
+  contents: read
+
 jobs:
   verify-codegen:
     runs-on: ubuntu-latest