fix workflow permissions

Author: mmguero

.github/workflows/arkime-build-and-push-ghcr.yml

@@ -26,6 +26,11 @@ on:
 jobs:
   docker:
     uses: ./.github/workflows/docker-build-push-scan.yml
+    permissions:
+      actions: write
+      packages: write
+      contents: read
+      security-events: write
     with:
       service: arkime
       dockerfile: ./Dockerfiles/arkime.Dockerfile

.github/workflows/dashboards-build-and-push-ghcr.yml

@@ -20,6 +20,11 @@ on:
 jobs:
   docker:
     uses: ./.github/workflows/docker-build-push-scan.yml
+    permissions:
+      actions: write
+      packages: write
+      contents: read
+      security-events: write
     with:
       service: dashboards
       dockerfile: ./Dockerfiles/dashboards.Dockerfile

.github/workflows/dashboards-helper-build-and-push-ghcr.yml

@@ -21,6 +21,11 @@ on:
 jobs:
   docker:
     uses: ./.github/workflows/docker-build-push-scan.yml
+    permissions:
+      actions: write
+      packages: write
+      contents: read
+      security-events: write
     with:
       service: dashboards-helper
       dockerfile: ./Dockerfiles/dashboards-helper.Dockerfile

.github/workflows/dirinit-build-and-push-ghcr.yml

@@ -15,6 +15,11 @@ on:
 jobs:
   docker:
     uses: ./.github/workflows/docker-build-push-scan.yml
+    permissions:
+      actions: write
+      packages: write
+      contents: read
+      security-events: write
     with:
       service: dirinit
       dockerfile: ./Dockerfiles/dirinit.Dockerfile

.github/workflows/file-upload-build-and-push-ghcr.yml

@@ -18,6 +18,11 @@ on:
 jobs:
   docker:
     uses: ./.github/workflows/docker-build-push-scan.yml
+    permissions:
+      actions: write
+      packages: write
+      contents: read
+      security-events: write
     with:
       service: file-upload
       dockerfile: ./Dockerfiles/file-upload.Dockerfile

.github/workflows/filebeat-build-and-push-ghcr.yml

@@ -22,6 +22,11 @@ on:
 jobs:
   docker:
     uses: ./.github/workflows/docker-build-push-scan.yml
+    permissions:
+      actions: write
+      packages: write
+      contents: read
+      security-events: write
     with:
       service: filebeat-oss
       dockerfile: ./Dockerfiles/filebeat.Dockerfile

.github/workflows/filescan-build-and-push-ghcr.yml

@@ -23,6 +23,11 @@ on:
 jobs:
   docker:
     uses: ./.github/workflows/docker-build-push-scan.yml
+    permissions:
+      actions: write
+      packages: write
+      contents: read
+      security-events: write
     with:
       service: filescan
       dockerfile: ./Dockerfiles/filescan.Dockerfile

.github/workflows/freq-build-and-push-ghcr.yml

@@ -18,6 +18,11 @@ on:
 jobs:
   docker:
     uses: ./.github/workflows/docker-build-push-scan.yml
+    permissions:
+      actions: write
+      packages: write
+      contents: read
+      security-events: write
     with:
       service: freq
       dockerfile: ./Dockerfiles/freq.Dockerfile

.github/workflows/hedgehog-iso-build-docker-wrap-push-ghcr.yml

@@ -17,5 +17,10 @@ on:
 jobs:
   build:
     uses: ./.github/workflows/iso-build-push.yml
+    permissions:
+      actions: write
+      packages: write
+      contents: read
+      security-events: write
     with:
       profile: hedgehog

.github/workflows/hedgehog-raspi-build-docker-wrap-push-ghcr.yml

@@ -18,6 +18,11 @@ on:
 jobs:
   build:
     uses: ./.github/workflows/raspi-build-push.yml
+    permissions:
+      actions: write
+      packages: write
+      contents: read
+      security-events: write
     with:
       profile: hedgehog
       rpi_model: 4