Set workflow permissions (#1184)

Author: gcatanese

.github/workflows/build-net6.0.yml

@@ -11,6 +11,9 @@ on:
       - promote/main
   workflow_dispatch: {}
 
+permissions:
+  contents: read
+  
 jobs:
   dotnet6-build-and-unit-test:
     name: Build and Test on .NET 6.0

.github/workflows/build-net8.0.yml

@@ -11,6 +11,9 @@ on:
       - promote/main
   workflow_dispatch: {}
 
+permissions:
+  contents: read
+
 jobs:
   dotnet8-build-and-unit-test:
     name: Build and Test on .NET 8.0

.github/workflows/codeql-analysis.yml

@@ -4,6 +4,10 @@ on:
   schedule:
     - cron: '0 1 * * 0'
 
+permissions:
+  contents: read
+  security-events: write
+
 jobs:
   CodeQL-Build:
 

.github/workflows/label_new_issues.yml

@@ -3,6 +3,9 @@ on:
   issues:
     types: [opened]
 
+permissions:
+  issues: write
+
 jobs:
   add-label:
     runs-on: ubuntu-latest

.github/workflows/publish.yml

@@ -5,6 +5,9 @@ on:
   release:
     types: [ published ]
 
+permissions:
+  contents: read
+
 jobs:
   # Publish the nuget package
   publish:

.github/workflows/release.yml

@@ -20,11 +20,12 @@ on:
     branches:
       - main
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   release:
-    permissions:
-      contents: write
-      pull-requests: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4

.github/workflows/stale.yml

@@ -3,6 +3,10 @@ on:
   schedule:
     - cron: '30 8 * * *'
 
+permissions:
+  issues: write
+  pull-requests: write
+
 jobs:
   stale:
     runs-on: ubuntu-latest