[CI] Add Token-Permissions to github workflow files (#518)

Address #516

Author: wenju-he

.github/workflows/on-demand-verification.yml

@@ -5,6 +5,9 @@
 name: On demand verification
 run-name: 'On demand by ${{ github.actor }}'
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
     inputs:

.github/workflows/on-push-verification.yml

@@ -7,6 +7,9 @@
 name: On push & pull-request verification
 run-name: '${{ github.event_name }}: ${{ github.base_ref }} ${{ github.ref_name }}' # github.base_ref null for 'on: push'
 
+permissions:
+  contents: read
+
 on:
   push:
     branches:

.github/workflows/scheduled-verification.yml

@@ -5,6 +5,9 @@
 name: Scheduled verification
 run-name: Scheduled verification
 
+permissions:
+  contents: read
+
 on:
   schedule:
     # Run Sunday & Wednesday at 00:00