fix zizmor reported issues (#1539)

Author: libotony

.github/workflows/publish-docker-images.yaml

@@ -30,7 +30,6 @@ on:
 
 permissions:
   contents: read
-  packages: write
 
 # -----------------------------------------------------------------------------
 # 🏗️ 1. Build and push per-architecture images
@@ -57,6 +56,9 @@ jobs:
     name: Build (${{ matrix.platform }})
     needs:
       - visibility
+    permissions:
+      contents: read
+      packages: write
     strategy:
       fail-fast: false
       matrix:
@@ -203,6 +205,9 @@ jobs:
     if: ${{ github.event_name != 'pull_request' }}
     runs-on: ubuntu-24.04
     environment: ${{ inputs.environment }}
+    permissions:
+      contents: read
+      packages: write
     steps:
       - name: Checkout Repo
         uses: actions/checkout@v5

.github/workflows/test.yaml

@@ -17,12 +17,7 @@ jobs:
         go-version: [1.25.4]
         os: [ubuntu-latest, macos-latest, windows-latest]
         include:
-<<<<<<< HEAD
-          - go-version: 1.23.x
-=======
           - go-version: 1.25.x
->>>>>>> 3226ee24 (chore: add go 1.25 go test suite (#1469))
-            os: ubuntu-latest
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout code

.github/zizmor.yaml

@@ -8,3 +8,4 @@ rules:
         actions/setup-node: ref-pin
         actions/download-artifact: ref-pin
         actions/upload-artifact: ref-pin
+        actions/stale: ref-pin