Merge pull request #8924 from varunsh-coder/token-perms

(maint) ci: add GitHub token permissions for workflows

Author: joshcooper

.github/workflows/checks.yaml

@@ -7,6 +7,9 @@ on:
   pull_request:
     branches: [main]
 
+permissions:
+  contents: read
+
 jobs:
   checks:
     name: ${{ matrix.cfg.check }}

.github/workflows/rspec_tests.yaml

@@ -7,6 +7,9 @@ on:
   pull_request:
     branches: [main]
 
+permissions:
+  contents: read
+
 jobs:
   rspec_tests:
     name: ${{ matrix.cfg.os }}(ruby ${{ matrix.cfg.ruby }})

.github/workflows/snyk_monitor.yaml

@@ -4,6 +4,9 @@ on:
   push:
     branches:
       - main
+permissions:
+  contents: read
+
 jobs:
   snyk_monitor:
     if: ${{ github.repository_owner == 'puppetlabs' }}