Merge pull request #152 from kubestellar/fix/all-workflow-permissions

🐛 Fix all caller workflow permissions

Author: clubanderson

.github/workflows/add-help-wanted.yml

@@ -2,9 +2,12 @@ name: Add Help Wanted Label
 
 on:
   issues:
-    types: [opened]
+    types: [labeled]
+
+permissions:
+  issues: write
 
 jobs:
-  add-label:
+  label:
     uses: kubestellar/infra/.github/workflows/reusable-add-help-wanted.yml@main
     secrets: inherit

.github/workflows/assignment-helper.yml

@@ -4,6 +4,9 @@ on:
   issue_comment:
     types: [created]
 
+permissions:
+  issues: write
+
 jobs:
   assignment-helper:
     uses: kubestellar/infra/.github/workflows/reusable-assignment-helper.yml@main

.github/workflows/pr-verifier.yml

@@ -1,8 +1,12 @@
-name: pr-verifier
+name: PR Verifier
 
 on:
   pull_request_target:
-    types: [opened, edited, reopened, synchronize]
+    types: [opened, edited, synchronize, reopened]
+
+permissions:
+  checks: write
+  pull-requests: read
 
 jobs:
   verify:

.github/workflows/scorecard.yml

@@ -8,6 +8,11 @@ on:
     branches: [ "main" ]
   workflow_dispatch:
 
+permissions:
+  security-events: write
+  contents: read
+  actions: read
+
 jobs:
   analysis:
     uses: kubestellar/infra/.github/workflows/reusable-scorecard.yml@main