fix: Code scanning alerts for workflows missing permissions (#4472)

* Potential fix for code scanning alert no. 3: Workflow does not contain permissions

Using GH copilot to fix permissions warnings in our security tab.

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* Potential fix for code scanning alert no. 6: Workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* Potential fix for code scanning alert no. 7: Workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* Potential fix for code scanning alert no. 10: Workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* Potential fix for code scanning alert no. 12: Workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* Potential fix for code scanning alert no. 22: Workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* Potential fix for code scanning alert no. 26: Workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* fix: Improve consistency and readability by having permissions at the top

---------

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Author: Hjaf

.github/workflows/checks.yaml

@@ -1,4 +1,6 @@
 name: Checks
+permissions:
+  contents: read
 on:
   workflow_dispatch:
   pull_request:

.github/workflows/pr-title-check.yml

@@ -5,6 +5,8 @@ on:
 
 jobs:
   check-title:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - name: Check PR Title Format

.github/workflows/publish_data_grid.yaml

@@ -1,5 +1,7 @@
 # TODO: Create a composite action for publishing to simplify things
 name: Publish data-grid-react
+permissions:
+  contents: read
 on:
   workflow_dispatch:
     inputs:

.github/workflows/publish_icons.yaml

@@ -1,5 +1,7 @@
 # TODO: Create a composite action for publishing to simplify things
 name: Publish icons
+permissions:
+  contents: read
 on:
   workflow_dispatch:
     inputs:

.github/workflows/publish_lab.yaml

@@ -1,5 +1,7 @@
 # TODO: Create a composite action for publishing to simplify things
 name: Publish lab-react
+permissions:
+  contents: read
 on:
   workflow_dispatch:
     inputs:

.github/workflows/publish_tokens.yaml

@@ -1,4 +1,6 @@
 name: Publish tokens
+permissions:
+  contents: read
 on:
   workflow_dispatch:
     inputs:

.github/workflows/sync-figma-to-tokens.yml

@@ -3,6 +3,8 @@ on:
   workflow_dispatch:
 jobs:
   setup:
+    permissions:
+      contents: read
     uses: ./.github/workflows/_setup.yml
     secrets: inherit
     with: