Add top-level permissions to all GitHub Actions workflows (#3368)

Author: Copilot

.github/workflows/codeQL.yml

@@ -4,6 +4,9 @@
 
 name: "CodeQL"
 
+permissions:
+  contents: read
+
 on:
   push:
     branches: [ "main", "*" ] # TODO: remove development branch after approval

.github/workflows/smoketest-java8-v4.yml

@@ -1,5 +1,8 @@
 name: Smoke Test - Java 8 on Functions V4
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
   push:

.github/workflows/smoketest-mssql-inproc-v4.yml

@@ -1,5 +1,8 @@
 name: Smoke Test - .NET in-proc w/ MSSQL on Functions V4
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
   push:

.github/workflows/smoketest-netherite-inproc-v4.yml

@@ -1,5 +1,8 @@
 name: Smoke Test - .NET in-proc w/ Netherite on Functions V4
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
   push:

.github/workflows/smoketest-node20-v4.yml

@@ -1,5 +1,8 @@
 name: Smoke Test - Node 20 on Functions V4
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
   push:

.github/workflows/smoketest-python311-v4.yml

@@ -1,5 +1,8 @@
 name: Smoke Test - Python 3.11 on Functions V4
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
   push:

.github/workflows/validate-build-analyzer.yml

@@ -1,5 +1,8 @@
 name: Validate Build (analyzer)
 
+permissions:
+  contents: read
+
 on:
   push:
     branches:

.github/workflows/validate-build-e2e.yml

@@ -1,5 +1,8 @@
 name: Validate Build (E2E tests)
 
+permissions:
+  contents: read
+
 on:
   push:
     branches:

.github/workflows/validate-build.yml

@@ -1,5 +1,8 @@
 name: Validate Build (except E2E tests)
 
+permissions:
+  contents: read
+
 on:
   push:
     branches: