chore(gh): update workflows (#1033)

Update workflows.

Signed-off-by: Ryan Johnson <ryan.johnson@broadcom.com>

Author: tenthirtyam

.github/workflows/docs.yml

@@ -1,14 +1,17 @@
+---
 name: Publish Documentation
 on:
   workflow_dispatch:
 permissions:
-  contents: write
+  contents: read
 jobs:
   publish-docs:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
       - name: Setup Python

.github/workflows/code-analysis.yml .github/workflows/lint.yml.github/workflows/code-analysis.yml renamed to .github/workflows/lint.yml

@@ -1,25 +1,29 @@
 ---
-name: "Code Analysis"
+name: Lint
+
 on:
   push:
   pull_request:
   workflow_dispatch:
+
+permissions:
+  contents: read
+
 jobs:
-  code-linting:
-    name: Code Linting
+  lint:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
       - name: Run GitHub Super-Linter
         uses: github/super-linter@b807e99ddd37e444d189cfd2c2ca1274d8ae8ef1 # v7
         env:
           GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
-          DEFAULT_BRANCH: "develop"
+          DEFAULT_BRANCH: develop
           DISABLE_ERRORS: false
-          FILTER_REGEX_EXCLUDE: "build.tmpl"
+          FILTER_REGEX_EXCLUDE: build.tmpl
           IGNORE_GITIGNORED_FILES: true
           VALIDATE_ALL_CODEBASE: false
           VALIDATE_BASH: true

.github/workflows/lock-threads.yml .github/workflows/lock.yml.github/workflows/lock-threads.yml renamed to .github/workflows/lock.yml

@@ -1,19 +1,24 @@
 ---
-name: Lock Threads
+name: Lock
 on:
   schedule:
     - cron: 30 00 * * *
+permissions:
+  contents: read
 jobs:
   lock:
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
     steps:
       - uses: dessant/lock-threads@d42e5f49803f3c4e14ffee0378e31481265dda22 # v5.0.0
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
           issue-comment: >-
             I'm going to lock this issue because it has been closed for 30
             days. This helps our maintainers find and focus on the active
-            issues. 
+            issues.
 
 
             If you have found a problem that seems similar to this,
@@ -23,7 +28,7 @@ jobs:
           pr-comment: >-
             I'm going to lock this pull request because it has been closed for
             30 days. This helps our maintainers find and focus on the active
-            issues. 
+            issues.
 
 
             If you have found a problem that seems related to this

.github/workflows/release.yml

@@ -1,20 +1,17 @@
+---
 name: Release
-
 on:
   push:
     tags:
       - "v[0-9]+.[0-9]+"
-
-
 permissions:
   contents: write
-
 jobs:
-  github-release:
+  release:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
       - name: Check Changelog

.github/workflows/stale.yml

@@ -1,8 +1,10 @@
 ---
-name: Manage Stale Items
+name: Stale
 on:
   schedule:
     - cron: 00 00 * * *
+permissions:
+  contents: read
 jobs:
   stale:
     runs-on: ubuntu-latest