update workflow permissions (#1147)

Author: libotony

.github/workflows/gosec.yaml

@@ -4,6 +4,9 @@ on:
   #   # This is meant to run every day at 8am
     - cron:  '0 8 * * 1-5'
 
+permissions:
+  contents: read
+
 jobs:
   gosec:
     runs-on: ubuntu-latest

.github/workflows/license-check.yaml

@@ -3,6 +3,9 @@ name: License Check
 on:
   workflow_call:
 
+permissions:
+  contents: read
+
 jobs:
   license-check:
     runs-on: ubuntu-latest

.github/workflows/publish-docker-images.yaml

@@ -28,15 +28,15 @@ on:
         type: boolean
         default: false
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   build-and-push-image:
     name: Build and Push Docker Image
     runs-on: ubuntu-22.04
 
-    permissions:
-      contents: read
-      packages: write
-
     environment: ${{ inputs.environment }}
     steps:
 

.github/workflows/test-e2e.yaml

@@ -2,6 +2,9 @@ name: E2E Tests
 
 on:
   workflow_call:
+    
+permissions:
+  contents: read
 
 jobs:
   build-docker-image:

.github/workflows/test-rosetta.yaml

@@ -11,12 +11,13 @@ on:
         required: true
         type: string
 
+permissions:
+  contents: read
+
 jobs:
   run-solo-tests:
     name: Run Solo e2e Tests
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
     env:
       THOR_REPO: ${{ inputs.thor_repo }}
       THOR_VERSION: ${{ inputs.thor_version }}

.github/workflows/test.yaml

@@ -7,6 +7,9 @@ on:
       CODECOV_TOKEN:
         required: false
 
+permissions:
+  contents: read
+
 jobs:
   unit_tests:
     strategy: