[CI] Add workflow permissions and bump actions (#86)

### 📝 Description

- Update the Github workflows with permissions
- Bump actions
- Pin third-party actions to specific commit

---

### 🚨 Breaking Changes?

- [ ] Yes (explain below)
- [x] No

<!-- If yes, describe what needs to be changed downstream: -->

---

### 🔍️ Additional Notes
<!-- Anything else reviewers should know (follow-up tasks, known issues,
affected areas etc.). -->
<!-- ### 📸 Screenshots / Logs -->

Author: TomerShor

.github/workflows/ci.yaml

@@ -16,14 +16,17 @@ name: CI
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   lint:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           cache: true
           go-version-file: "go.mod"
@@ -35,9 +38,9 @@ jobs:
     name: Test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           cache: true
           go-version-file: "go.mod"
@@ -49,9 +52,9 @@ jobs:
     name: Build docker images
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           cache: true
           go-version-file: "go.mod"

.github/workflows/release.yaml

@@ -24,6 +24,9 @@ on:
     branches:
     - development
 
+permissions:
+  contents: read
+
 env:
   AUTOSCALER_DOCKER_REPO: quay.io/v3io/autoscaler
   DLX_DOCKER_REPO: quay.io/v3io/dlx
@@ -50,14 +53,14 @@ jobs:
         run: |
           echo "SCALER_LABEL=${{ steps.release_info.outputs.REF_TAG }}" >> $GITHUB_ENV
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           cache: true
           go-version-file: "go.mod"
 
-      - uses: azure/docker-login@v1
+      - uses: azure/docker-login@15c4aadf093404726ab2ff205b2cdd33fa6d054c # v2
         with:
           login-server: quay.io
           username: ${{ secrets.QUAYIO_DOCKER_USERNAME }}