[CI/CD] add write permissions for updating badge and pushing test results (#1206)

* add write permissions for updating badge and pushing test results

* set benchmark alert back to 175%

* set both thresholds to 150%

Author: sean-breen

.github/workflows/ci.yml

@@ -58,6 +58,8 @@ jobs:
   unit-test:
       name: Unit Tests
       runs-on: ubuntu-22.04
+      permissions:
+        contents: write
       steps:
           - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
           - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
@@ -255,7 +257,7 @@ jobs:
           benchmark-data-dir-path: ""
           # Set auto-push to false since GitHub API token is not given
           auto-push: false
-          alert-threshold: '125%'
+          alert-threshold: '150%'
           gh-pages-branch: "benchmark-results"
           fail-on-alert: true
       - name: Push benchmark result
@@ -264,9 +266,10 @@ jobs:
   load-tests:
     name: Load Tests
     if: ${{ !github.event.pull_request.head.repo.fork && !startsWith(github.ref_name, 'dependabot/') }}
+    permissions:
+      contents: write
     runs-on: ubuntu-22.04
     needs: build-unsigned-snapshot
-
     steps:
       - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
       - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
@@ -326,7 +329,11 @@ jobs:
           benchmark-data-dir-path: ""
           # Set auto-push to false since GitHub API token is not given
           auto-push: false
-          alert-threshold: '125%'
+<<<<<<< Updated upstream
+          alert-threshold: '175%'
+=======
+          alert-threshold: '150%'
+>>>>>>> Stashed changes
           gh-pages-branch: "benchmark-results"
           fail-on-alert: true