- add in permissions for the jobs

Author: CarrJ

.github/workflows/pipeline.yaml

@@ -8,10 +8,16 @@ on:
 jobs:
   dependency-review:
     uses: ./.github/workflows/dependency-review.yaml
+    permissions:
+      contents: read
 
   test:
     needs: dependency-review
     uses: ./.github/workflows/test.yaml
+    permissions:
+      contents: read          # Allows the action to check out your repository code
+      pull-requests: write    # Allows the action to comment on or update the Dependabot PR
+      statuses: write         # Allows the action to post pass/fail build statuses
 
   check-gem-version:
     needs: test
@@ -22,7 +28,7 @@ jobs:
     if: github.event_name == 'push' && needs.check-gem-version.outputs.version-changed == 'true'
     with:
       new-gem-version: true
-    uses: ./.github/workflows/publish.yaml
+    uses: ./.github/workflows/publish-gem.yaml
 
   check-documentation-updates:
      needs: publish-gem
@@ -35,4 +41,8 @@ jobs:
   publish-github-pages:
     needs: check-documentation-updates
     if: github.event_name == 'push' && needs.check-documentation-updates.outputs.documentation-updated == 'true'
-    uses: ./.github/workflows/publish-github-pages.yaml
+    uses: ./.github/workflows/publish-github-pages.yaml
+    permissions:
+      contents: read
+      pages: write
+      id-token: write