add workflow-wide permissions

Author: epszaw

.github/workflows/build.yml

@@ -10,6 +10,9 @@ on:
       - "main"
       - "hotfix-*"
 
+permissions:
+  contents: read
+
 jobs:
   build:
     strategy:
@@ -32,4 +35,4 @@ jobs:
         run: powershell -ExecutionPolicy Bypass -File fetch-source.ps1
         if: runner.os == 'Windows'
       - run: npm link
-      - run: allure --version
+      - run: allure --version

.github/workflows/npm-publish.yml

@@ -4,6 +4,9 @@ on:
   release:
     types: [ published ]
 
+permissions:
+  contents: read
+
 jobs:
 
   publish-npm:

.github/workflows/release.yml

@@ -8,9 +8,14 @@ on:
         description: "The release version in <MAJOR>.<MINOR>.<PATCH> format"
         required: true
 
+permissions:
+  contents: read
+
 jobs:
   triage:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: "Check release version"
         run: |