Revert "Add minimum token permissions for all github workflow files (#990)" (#999)

songy23 · web-flow · commit 8a41788ccd50 · 2025-07-03T09:33:36.000Z
This reverts commit 0b07764.
diff --git a/.github/workflows/base-ci-goreleaser.yaml b/.github/workflows/base-ci-goreleaser.yaml
@@ -28,9 +28,6 @@ on:
         required: false
         type: string
 
-permissions:
-  contents: read
-
 env:
   # renovate: datasource=github-tags depName=goreleaser-pro packageName=goreleaser/goreleaser-pro
   GORELEASER_PRO_VERSION: v2.7.0
diff --git a/.github/workflows/base-package-tests.yaml b/.github/workflows/base-package-tests.yaml
@@ -15,9 +15,6 @@ on:
         default: false
         description: "Set to true if a GH issue should be generated upon failure"
 
-permissions:
-  contents: read
-
 jobs:
   package-tests:
     name: Package Tests
diff --git a/.github/workflows/base-release.yaml b/.github/workflows/base-release.yaml
@@ -17,9 +17,6 @@ on:
         type: string
         default: ubuntu-24.04
 
-permissions:
-  contents: read
-
 env:
   # renovate: datasource=github-tags depName=goreleaser-pro packageName=goreleaser/goreleaser-pro
   GORELEASER_PRO_VERSION: v2.7.0
diff --git a/.github/workflows/builder-release.yaml b/.github/workflows/builder-release.yaml
@@ -4,9 +4,6 @@ on:
     tags:
       - "v*"
 
-permissions:
-  contents: read
-
 env:
   # renovate: datasource=github-tags depName=goreleaser-pro packageName=goreleaser/goreleaser-pro
   GORELEASER_PRO_VERSION: v2.7.0
diff --git a/.github/workflows/builder-testbuild.yaml b/.github/workflows/builder-testbuild.yaml
@@ -23,9 +23,6 @@ on:
       - "go.mod"
       - "go.sum"
 
-permissions:
-  contents: read
-
 env:
   # renovate: datasource=github-tags depName=goreleaser-pro packageName=goreleaser/goreleaser-pro
   GORELEASER_PRO_VERSION: v2.7.0
diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml
@@ -11,9 +11,6 @@ on:
     branches:
       - main
 
-permissions:
-  contents: read
-
 env:
   # Make sure to exit early if cache segment download times out after 2 minutes.
   # We limit cache download as a whole to 5 minutes.
diff --git a/.github/workflows/ci-goreleaser-contrib.yaml b/.github/workflows/ci-goreleaser-contrib.yaml
@@ -23,10 +23,6 @@ on:
       - "go.mod"
       - "go.sum"
 
-
-permissions:
-  contents: read
-
 jobs:
   check-goreleaser:
     name: CI - Contrib - GoReleaser
@@ -37,10 +33,6 @@ jobs:
       goarch: '[ "386", "amd64", "arm64", "ppc64le", "arm", "s390x" ]'
     secrets: inherit
 
-
-permissions:
-  contents: read
-
   package-tests:
      name: Package tests
      needs: check-goreleaser
@@ -49,10 +41,6 @@ permissions:
        distribution: otelcol-contrib
        type: '[ "deb", "rpm" ]'
 
-
-permissions:
-  contents: read
-
   msi-tests:
     name: MSI tests
     needs: check-goreleaser
diff --git a/.github/workflows/ci-goreleaser-core.yaml b/.github/workflows/ci-goreleaser-core.yaml
@@ -23,10 +23,6 @@ on:
       - "go.mod"
       - "go.sum"
 
-
-permissions:
-  contents: read
-
 jobs:
   check-goreleaser:
     name: CI - Core - GoReleaser
@@ -37,10 +33,6 @@ jobs:
       goarch: '[ "386", "amd64", "arm64", "ppc64le", "arm", "s390x" ]'
     secrets: inherit
 
-
-permissions:
-  contents: read
-
   package-tests:
      name: Package tests
      needs: check-goreleaser
@@ -49,10 +41,6 @@ permissions:
        distribution: otelcol
        type: '[ "deb", "rpm" ]'
 
-
-permissions:
-  contents: read
-
   msi-tests:
     name: MSI tests
     needs: check-goreleaser
diff --git a/.github/workflows/ci-goreleaser-ebpf-profiler.yaml b/.github/workflows/ci-goreleaser-ebpf-profiler.yaml
@@ -23,10 +23,6 @@ on:
       - "go.mod"
       - "go.sum"
 
-
-permissions:
-  contents: read
-
 jobs:
   check-goreleaser:
     name: CI - eBPF Profiler - GoReleaser
diff --git a/.github/workflows/ci-goreleaser-k8s.yaml b/.github/workflows/ci-goreleaser-k8s.yaml
@@ -23,10 +23,6 @@ on:
       - "go.mod"
       - "go.sum"
 
-
-permissions:
-  contents: read
-
 jobs:
   check-goreleaser:
     name: CI - k8s - GoReleaser
diff --git a/.github/workflows/ci-goreleaser-otlp.yaml b/.github/workflows/ci-goreleaser-otlp.yaml
@@ -23,10 +23,6 @@ on:
       - "go.mod"
       - "go.sum"
 
-
-permissions:
-  contents: read
-
 jobs:
   check-goreleaser:
     name: CI - OTLP - GoReleaser
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -7,9 +7,6 @@ on:
   pull_request:
     branches: [main]
 
-permissions:
-  contents: read
-
 jobs:
   build:
     name: Build
diff --git a/.github/workflows/msi-tests.yaml b/.github/workflows/msi-tests.yaml
@@ -10,9 +10,6 @@ on:
         required: true
         type: string
 
-permissions:
-  contents: read
-
 jobs:
   msi-tests:
     name: MSI Tests
diff --git a/.github/workflows/opampsupervisor-release.yaml b/.github/workflows/opampsupervisor-release.yaml
@@ -4,9 +4,6 @@ on:
     tags:
       - "v*"
 
-permissions:
-  contents: read
-
 env:
   # renovate: datasource=github-tags depName=goreleaser-pro packageName=goreleaser/goreleaser-pro
   GORELEASER_PRO_VERSION: v2.7.0
diff --git a/.github/workflows/opampsupervisor-testbuild.yaml b/.github/workflows/opampsupervisor-testbuild.yaml
@@ -21,9 +21,6 @@ on:
       - "go.mod"
       - "go.sum"
 
-permissions:
-  contents: read
-
 env:
   # renovate: datasource=github-tags depName=goreleaser-pro packageName=goreleaser/goreleaser-pro
   GORELEASER_PRO_VERSION: v2.7.0
diff --git a/.github/workflows/package-test.yaml b/.github/workflows/package-test.yaml
@@ -4,9 +4,6 @@ on:
   schedule:
     - cron: "0 2 * * *" # every day at 2am UTC
 
-permissions:
-  contents: read
-
 jobs:
   check-goreleaser:
     name: Build - Contrib - GoReleaser
diff --git a/.github/workflows/release-contrib.yaml b/.github/workflows/release-contrib.yaml
@@ -4,9 +4,6 @@ on:
   push:
     tags: ["v*"]
 
-permissions:
-  contents: read
-
 jobs:
   release:
     name: Release Contrib
diff --git a/.github/workflows/release-core.yaml b/.github/workflows/release-core.yaml
@@ -4,9 +4,6 @@ on:
   push:
     tags: ["v*"]
 
-permissions:
-  contents: read
-
 jobs:
   release:
     name: Release Core
diff --git a/.github/workflows/release-k8s.yaml b/.github/workflows/release-k8s.yaml
@@ -4,9 +4,6 @@ on:
   push:
     tags: ["v*"]
 
-permissions:
-  contents: read
-
 jobs:
   release:
     name: Release k8s
diff --git a/.github/workflows/release-otlp.yaml b/.github/workflows/release-otlp.yaml
@@ -4,9 +4,6 @@ on:
   push:
     tags: ["v*"]
 
-permissions:
-  contents: read
-
 jobs:
   release:
     name: Release OTLP
diff --git a/.github/workflows/shellcheck.yml b/.github/workflows/shellcheck.yml
@@ -6,9 +6,6 @@ on:
   pull_request:
     branches: [ main ]
 
-permissions:
-  contents: read
-
 jobs:
   shellcheck:
     name: Shellcheck
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
@@ -4,14 +4,8 @@ on:
   schedule:
     - cron: "12 5 * * *" # arbitrary time not to DDOS GitHub
 
-permissions:
-  contents: read
-
 jobs:
   stale:
-    permissions:
-      issues: write # required for managing stale issues
-      pull-requests: write # required for managing stale PRs
     runs-on: ubuntu-24.04
     env:
       GH_TOKEN: ${{ github.token }}
diff --git a/.github/workflows/update-version.yaml b/.github/workflows/update-version.yaml
@@ -15,14 +15,8 @@ on:
         required: false
         default: ''
 
-permissions:
-  contents: read
-
 jobs:
   update-version:
-    permissions:
-      contents: write # required for pushing changes
-      pull-requests: write # required for creating PRs
     runs-on: ubuntu-24.04
     env:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
