Squashed commit of the following:

commit 9a3bf2c0ed6e63c718789679745fdaa24a2c2ba9
Author: Joyce Brum <joycebrum@google.com>
Date:   Tue Dec 6 17:59:42 2022 +0000

    fix: write permissions

    Signed-off-by: Joyce Brum <joycebrum@google.com>

commit 7716f3c00cd7cfe4debbbf97662b1cee7277ba00
Author: Joyce Brum <joycebrum@google.com>
Date:   Tue Dec 6 17:04:19 2022 +0000

    fix: typo on coverage workflow

    Signed-off-by: Joyce Brum <joycebrum@google.com>

commit cb5165401392f1a2de3683ec33ffe97dc0f1fe9f
Author: Joyce Brum <joycebrum@google.com>
Date:   Tue Dec 6 16:57:50 2022 +0000

    feat: test coverage workflow with write permissions

    Signed-off-by: Joyce Brum <joycebrum@google.com>

commit 235627f257d52139c9c73c2ca15c9ef7250cea2f
Author: Joyce Brum <joycebrum@google.com>
Date:   Tue Dec 6 16:44:21 2022 +0000

    fix: measure test read all and workflow dispatch

    Signed-off-by: Joyce Brum <joycebrum@google.com>

commit 81b1581f19945ba5ddd7fa74661910a457af7515
Author: Joyce Brum <joycebrum@google.com>
Date:   Tue Dec 6 14:50:12 2022 +0000

    feat: change from content read to read all

    Signed-off-by: Joyce Brum <joycebrum@google.com>

commit 95bd39f615924a9c0186e6d3e1ad6c205c7db428
Author: Joyce Brum <joycebrum@google.com>
Date:   Tue Dec 6 14:45:45 2022 +0000

    fix: add permission to write on e2e.yaml

    Signed-off-by: Joyce Brum <joycebrum@google.com>

commit f86661da253af3908cde9f5f71311fbca6b26c81
Author: Joyce Brum <joycebrum@google.com>
Date:   Mon Dec 5 17:04:44 2022 +0000

    feat: use read-only by default

    Signed-off-by: Joyce Brum <joycebrum@google.com>

Signed-off-by: Joyce Brum <joycebrum@google.com>

.github/workflows/build.yaml

@@ -1,5 +1,7 @@
 name: Build
 on: [push, pull_request]
+permissions: read-all
+
 jobs:
   build:
     runs-on: ubuntu-latest

.github/workflows/codeql-analysis.yml

@@ -20,6 +20,8 @@ on:
   schedule:
     - cron: '20 14 * * 5'
 
+permissions: read-all
+
 jobs:
   analyze:
     name: Analyze

.github/workflows/contrib.yaml

@@ -1,5 +1,6 @@
 name: Test contrib/mixin
 on: [push, pull_request]
+permissions: read-all
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/coverage.yaml

@@ -1,5 +1,6 @@
 name: Coverage
 on: [push]
+permissions: read-all
 jobs:
   coverage:
     runs-on: ubuntu-latest

.github/workflows/e2e.yaml

@@ -1,8 +1,11 @@
 name: E2E
 on: [push, pull_request]
+permissions: read-all
 jobs:
   test:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     strategy:
       fail-fast: true
       matrix:

.github/workflows/functional.yaml

@@ -1,5 +1,6 @@
 name: functional-tests
 on: [push, pull_request]
+permissions: read-all
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/fuzzing.yaml

@@ -1,5 +1,6 @@
 name: Fuzzing v3rpc
 on: [push, pull_request]
+permissions: read-all
 jobs:
   fuzzing:
     runs-on: ubuntu-latest

.github/workflows/govuln.yaml

@@ -1,5 +1,6 @@
 name: Go Vulnerability Checker
 on: [push, pull_request]
+permissions: read-all
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/grpcproxy.yaml

@@ -1,5 +1,6 @@
 name: grpcProxy-tests
 on: [push, pull_request]
+permissions: read-all
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/linearizability.yaml

@@ -1,5 +1,6 @@
 name: Linearizability
 on: [push, pull_request]
+permissions: read-all
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/measure-test-flakiness.yaml

@@ -1,9 +1,12 @@
 name: Measure Test Flakiness
 
 on:
+  workflow_dispatch:
   schedule:
     - cron: "0 0 * * 0"
 
+permissions: read-all
+
 jobs:
   measure-test-flakiness:
     name: Measure Test Flakiness

.github/workflows/release.yaml

@@ -1,7 +1,10 @@
 name: Release
 on: [push, pull_request]
+permissions: read-all
 jobs:
   main:
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v2

.github/workflows/static-analysis.yaml

@@ -1,5 +1,6 @@
 name: Static Analysis
 on: [push, pull_request]
+permissions: read-all
 jobs:
   run:
     runs-on: ubuntu-latest

.github/workflows/tests.yaml

@@ -1,5 +1,6 @@
 name: Tests
 on: [push, pull_request]
+permissions: read-all
 jobs:
   test:
     runs-on: ubuntu-latest