fix: stuff

Author: NotAwar

.github/workflows/build.yml

@@ -15,6 +15,7 @@ env:
   GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
 jobs:
+  permissions: write-all
   main:
     runs-on: ubuntu-latest
     strategy:

.github/workflows/build_compact.yml

@@ -9,6 +9,7 @@ env:
   GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
 jobs:
+  permissions: write-all
   compact:
     runs-on: ubuntu-latest
     strategy:

.github/workflows/docs.yml

@@ -12,6 +12,7 @@ env:
   GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
 jobs:
+  permissions: write-all
   check-secret:
     if: ${{ github.event.pull_request.head.repo.fork == false }}
     runs-on: ubuntu-latest

.github/workflows/lint_and_submodule_check.yml

@@ -9,6 +9,7 @@ env:
   SET_GH_OUTPUT: 1
 
 jobs:
+  permissions: write-all
   lint_sources_check_submodules:
     runs-on: ubuntu-latest
     steps:

.github/workflows/merge_report.yml

@@ -10,6 +10,7 @@ env:
   GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
 jobs:
+  permissions: write-all
   merge_report:
     runs-on: ubuntu-latest
     steps:

.github/workflows/pvs_studio.yml

@@ -14,6 +14,7 @@ env:
   GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
 jobs:
+  permissions: write-all
   analyse_c_cpp:
     if: ${{ !github.event.pull_request.head.repo.fork }}
     runs-on: ubuntu-latest

.github/workflows/reindex.yml

@@ -5,6 +5,7 @@ on:
     types: [prereleased, released]
 
 jobs:
+  permissions: write-all
   reindex:
     name: 'Post-release hooks'
     runs-on: ubuntu-latest

.github/workflows/unit_tests.yml

@@ -9,6 +9,7 @@ env:
   FBT_GIT_SUBMODULE_SHALLOW: 1
 
 jobs:
+  permissions: write-all
   run_units_on_bench:
     runs-on: ubuntu-latest
     steps:

.github/workflows/updater_test.yml

@@ -9,6 +9,7 @@ env:
   FBT_GIT_SUBMODULE_SHALLOW: 1
 
 jobs:
+  permissions: write-all
   test_updater_on_bench:
     runs-on: ubuntu-latest
     steps: