chore: apply security best practices from step security (#2803)

[StepSecurity] Apply security best practices

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>

Author: stepsecurity-app[bot]

.github/workflows/draft-new-release.yml

@@ -17,6 +17,9 @@ concurrency:
 env:
   NODE_OPTIONS: '--no-warnings'
 
+permissions:
+  contents: read
+
 jobs:
   validate-actor:
     permissions: {}

.github/workflows/publish-new-release.yml

@@ -10,6 +10,9 @@ on:
 env:
   NODE_OPTIONS: '--no-warnings'
 
+permissions:
+  contents: read
+
 jobs:
   get-release-inputs:
     name: Get Release Inputs

.github/workflows/run-e2e-regression-test-suites.yml

@@ -40,6 +40,9 @@ env:
   CHECK_INTERVAL_FOR_E2E_TESTS: 60      # 1 minute
   TARGET_REPO: rudderlabs/rudder-client-side-test
 
+permissions:
+  contents: read
+
 jobs:
   extract-monorepo-version:
     name: Extract Monorepo Version

.github/workflows/validate-actor.yml

@@ -11,6 +11,9 @@ on:
       RELEASE_PRIVATE_KEY:
         required: true
 
+permissions:
+  contents: read
+
 jobs:
   validate-actor:
     runs-on: [self-hosted, Linux, X64]