chore/COMPASS-9461 handle codeql alerts

Author: mabaasit

.github/workflows/publish-storybook.yml

@@ -3,6 +3,8 @@ on:
   push:
     branches:
       - main
+permissions:
+  contents: write
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/publish.yml

@@ -3,7 +3,9 @@ name: Publish
 on:
   release:
     types: [created]
-
+permissions:
+  contents: write
+  packages: write
 jobs:
   publish:
     runs-on: ubuntu-latest

.github/workflows/run-unit-tests.yml

@@ -3,6 +3,8 @@ on:
   pull_request:
     branches:
       - main
+permissions:
+  contents: read
 jobs:
   test:
     runs-on: ubuntu-latest