Merge pull request #138 from rudderlabs/chore/sec-167-rb-rudder-sdk-java

chore(vuln): scope workflow permissions to least privilege (SEC-167)

Author: lokey

.github/workflows/build-and-quality-checks.yml

@@ -5,6 +5,9 @@ on:
     branches: [ 'master', 'develop' ]
     types: [ 'opened', 'reopened', 'synchronize' ]
 
+permissions:
+  contents: read
+
 jobs:
   unit_test_and_build:
     runs-on: ubuntu-latest

.github/workflows/check-pr-title.yml

@@ -4,6 +4,9 @@ on:
     branches: [ 'master', 'develop' ]
     types: [ 'opened', 'reopened', 'edited', 'synchronize' ]
 
+permissions:
+  contents: read
+
 jobs:
   check_pr_title:
     name: Check PR title