Merge pull request #14905 from joycebrum/main

Set Github workflows default permissions to read-only

.github/workflows/build.yaml

@@ -1,5 +1,7 @@
 name: Build
 on: [push, pull_request]
+permissions: read-all
+
 jobs:
   build:
     runs-on: ubuntu-latest

.github/workflows/codeql-analysis.yml

@@ -20,6 +20,8 @@ on:
   schedule:
     - cron: '20 14 * * 5'
 
+permissions: read-all
+
 jobs:
   analyze:
     name: Analyze

.github/workflows/contrib.yaml

@@ -1,5 +1,6 @@
 name: Test contrib/mixin
 on: [push, pull_request]
+permissions: read-all
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/coverage.yaml

@@ -1,5 +1,6 @@
 name: Coverage
 on: [push]
+permissions: read-all
 jobs:
   coverage:
     runs-on: ubuntu-latest

.github/workflows/e2e.yaml

@@ -1,5 +1,6 @@
 name: E2E
 on: [push, pull_request]
+permissions: read-all
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/functional.yaml

@@ -1,5 +1,6 @@
 name: functional-tests
 on: [push, pull_request]
+permissions: read-all
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/fuzzing.yaml

@@ -1,5 +1,6 @@
 name: Fuzzing v3rpc
 on: [push, pull_request]
+permissions: read-all
 jobs:
   fuzzing:
     runs-on: ubuntu-latest

.github/workflows/govuln.yaml

@@ -1,5 +1,6 @@
 name: Go Vulnerability Checker
 on: [push, pull_request]
+permissions: read-all
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/grpcproxy.yaml

@@ -1,5 +1,6 @@
 name: grpcProxy-tests
 on: [push, pull_request]
+permissions: read-all
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/linearizability.yaml

@@ -1,5 +1,6 @@
 name: Linearizability
 on: [push, pull_request]
+permissions: read-all
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/measure-test-flakiness.yaml

@@ -4,6 +4,8 @@ on:
   schedule:
     - cron: "0 0 * * 0"
 
+permissions: read-all
+
 jobs:
   measure-test-flakiness:
     name: Measure Test Flakiness

.github/workflows/release.yaml

@@ -1,5 +1,6 @@
 name: Release
 on: [push, pull_request]
+permissions: read-all
 jobs:
   main:
     runs-on: ubuntu-latest

.github/workflows/static-analysis.yaml

@@ -1,5 +1,6 @@
 name: Static Analysis
 on: [push, pull_request]
+permissions: read-all
 jobs:
   run:
     runs-on: ubuntu-latest

.github/workflows/tests.yaml

@@ -1,5 +1,6 @@
 name: Tests
 on: [push, pull_request]
+permissions: read-all
 jobs:
   test:
     runs-on: ubuntu-latest