Fix

Signed-off-by: ZePan110 <[email protected]>

Author: ZePan110

.github/workflows/_comps-workflow.yml

@@ -115,8 +115,20 @@ jobs:
   test-service-compose:
     if: ${{ fromJSON(inputs.test_compose) }}
     permissions:
-      id-token: write
+      actions: read
+      attestations: read
+      checks: read
       contents: read
+      deployments: read
+      discussions: read
+      id-token: write
+      issues: read
+      packages: read
+      pages: read
+      pull-requests: read
+      repository-projects: read
+      security-events: read
+      statuses: read
     uses: ./.github/workflows/_run-docker-compose.yml
     with:
       tag: ${{ inputs.tag }}

.github/workflows/manual-comps-test.yml

@@ -48,8 +48,6 @@ on:
         required: false
         type: boolean
 
-# permissions: read-all
-
 jobs:
   get-test-matrix:
     runs-on: ubuntu-latest
@@ -69,6 +67,21 @@ jobs:
 
   run-services:
     needs: [get-test-matrix]
+    permissions:
+      actions: read
+      attestations: read
+      checks: read
+      contents: read
+      deployments: read
+      discussions: read
+      id-token: write
+      issues: read
+      packages: read
+      pages: read
+      pull-requests: read
+      repository-projects: read
+      security-events: read
+      statuses: read
     strategy:
       matrix:
         service: ${{ fromJson(needs.get-test-matrix.outputs.services) }}

.github/workflows/push-infra-issue-creation.yml

@@ -1,15 +1,14 @@
 # Copyright (C) 2024 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 
-permissions: read-all
-
 on:
   push:
     branches: [ 'main','issue' ]
     paths:
       - "**/docker_compose/*.yaml"
 
 name: Create an issue to GenAIInfra on push
+permissions: read-all
 jobs:
   job1:
     name: Create issue