Added explicit permissions to all GitHub action workflows (jwngr#306)

Author: jwngr

.github/workflows/firebase-hosting-merge.yml

@@ -1,8 +1,13 @@
 name: Deploy prod frontend on merge
+
 on:
   push:
     branches:
       - main
+
+permissions:
+  contents: read
+
 jobs:
   build_and_deploy:
     runs-on: ubuntu-latest

.github/workflows/firebase-hosting-pull-request.yml

@@ -1,9 +1,12 @@
 name: Deploy frontend preview on PR
+
 on: pull_request
+
 permissions:
   checks: write
   contents: read
   pull-requests: write
+
 jobs:
   build_and_preview:
     if: ${{ github.event.pull_request.head.repo.full_name == github.repository }}

.github/workflows/frontend-ci.yml

@@ -1,5 +1,10 @@
 name: Run Frontend CI on push
+
 on: [push]
+
+permissions:
+  contents: read
+
 jobs:
   frontend-ci:
     runs-on: ubuntu-latest