CCM-11029: workflow permissions

Author: harrim91

.github/workflows/cicd-1-pull-request.yaml

@@ -12,7 +12,6 @@ concurrency:
   cancel-in-progress: false
 
 permissions:
-  contents: read  # This is required for actions/checkout
   packages: read  # This is required to install packages from GitHub package registry
 
 jobs:

.github/workflows/stage-1-commit.yaml

@@ -72,7 +72,7 @@ jobs:
     needs: detect-terraform-changes
     if: needs.detect-terraform-changes.outputs.terraform_changed == 'true'
     permissions:
-        contents: write
+      contents: write
     steps:
       - name: "Checkout code"
         uses: actions/[email protected]
@@ -244,7 +244,6 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
-      packages: read
     steps:
       - name: "Checkout code"
         uses: actions/checkout@v4

.github/workflows/stage-2-test.yaml

@@ -153,7 +153,6 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
-      packages: read
     steps:
       - name: "Checkout code"
         uses: actions/[email protected]