#3278 added permissions in github workflows (#3290)

Author: equinorpiyush

.github/workflows/a11y.yaml

@@ -3,6 +3,8 @@ on:
   workflow_dispatch:
   schedule:
     - cron: '0 8 * * *'
+permissions:
+  contents: read
 jobs:
   test_for_accessibility_issues:
     runs-on: ubuntu-latest

.github/workflows/codeql-analysis.yaml

@@ -19,7 +19,8 @@ on:
     branches: [main]
   schedule:
     - cron: '35 1 * * 4'
-
+permissions:
+  contents: read
 jobs:
   analyze:
     name: Analyze

.github/workflows/dataset-backup.yaml

@@ -14,6 +14,8 @@ on:
   schedule:
     # Runs at 02:00 UTC every sunday
     - cron: '0 2 * * 0'
+permissions:
+  contents: read
 env:
   BUILD_ARTIFACT_PATH: ${{ github.workspace }}/backups
 jobs:

.github/workflows/equinor-algolia-indexers.yaml

@@ -19,6 +19,9 @@ on:
       - '!./README.md'
       - '!./.env.template'
 
+permissions:
+  contents: read
+
 env:
   SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
   BUILD_OUTPUT_PATH: ${{ github.workspace }}/search

.github/workflows/fotoware-redirect.yaml

@@ -14,7 +14,8 @@ on:
         description: 'Enter the branch name in fotoware repository. Default is master'
         default: master
         type: string
-
+permissions:
+  contents: read
 env:
   SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
   BUILD_PACKAGE_NAME: fotoware.zip

.github/workflows/setup-azure.yaml

@@ -7,6 +7,9 @@ on:
         type: string
         required: true
 
+permissions:
+  contents: read
+
 env:
   SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
 

.github/workflows/wiki-notifier.yaml

@@ -1,6 +1,8 @@
 name: Notify on wiki updates
 on:
   gollum
+permissions:
+  contents: read
 jobs:
   check_for_updates:
     runs-on: ubuntu-latest