Fix Token-Permissions

Author: simpat-jesus

.github/workflows/on-prerelease.yml

@@ -84,7 +84,6 @@ jobs:
         shell: pwsh
     needs: pack
     permissions:
-      actions: read
       contents: write
       attestations: write
       id-token: write
@@ -110,7 +109,6 @@ jobs:
     name: Create Provenance
     needs: pack
     permissions:
-      actions: read
       id-token: write
       contents: write      
     uses: Ed-Fi-Alliance-OSS/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@main

.github/workflows/on-push-main.yml

@@ -19,12 +19,13 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
 
-permissions:
-  contents: write
+permissions: read-all
 
 jobs:
   dependency-submission:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     defaults:
       run:
         working-directory: kafka/ed-fi-kafka-connect-transforms