chore: add permissions for github actions

.github/workflows/announce.yml

@@ -1,5 +1,8 @@
 name: Slack Announcement
 
+permissions:
+  contents: read
+
 on:
   release:
     types:

.github/workflows/codeql-analysis.yml

@@ -5,6 +5,9 @@
 # or to provide custom queries or build logic.
 name: "CodeQL"
 
+permissions:
+  contents: read
+
 on:
   push:
     branches: [master, v1]

.github/workflows/coverage.yml

@@ -1,5 +1,8 @@
 name: CodeCov Coverage
 
+permissions:
+  contents: read
+
 on:
   push:
   pull_request:

.github/workflows/docs.yml

@@ -1,4 +1,8 @@
 name: Documentation Workflows
+
+permissions:
+  contents: read
+
 on:
   pull_request:
   merge_group:

.github/workflows/lint.yml

@@ -1,4 +1,8 @@
 name: Lint
+
+permissions:
+  contents: read
+
 on:
   pull_request:
   merge_group:

.github/workflows/nightly.yml

@@ -1,5 +1,8 @@
 name: Nightly Acceptance Tests
 
+permissions:
+  contents: read
+
 on:
   schedule:
     # Will run at 00:00 every day

.github/workflows/purge.yml

@@ -1,4 +1,8 @@
 name: Manual Purge
+
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
 

.github/workflows/unit-tests.yaml

@@ -1,5 +1,8 @@
 name: Tests
 
+permissions:
+  contents: read
+
 on:
   pull_request:
   merge_group:

.github/workflows/wasm.yml

@@ -1,5 +1,8 @@
 name: WebAssembly
 
+permissions:
+  contents: read
+
 on:
   pull_request:
   merge_group: