Clarify part of permissions

Author: MaxymVlasov

.github/workflows/build-image-test.yaml

@@ -2,7 +2,10 @@
 
 name: Build Dockerfile if changed and run smoke tests
 
-on: [pull_request]
+on:
+  pull_request:
+
+permissions: {}
 
 env:
   IMAGE_TAG: pr-test

.github/workflows/build-image.yaml

@@ -15,6 +15,10 @@ permissions:
 
 jobs:
   docker:
+    permissions:
+      # for docker/build-push-action to publish docker image
+      packages: write
+
     runs-on: ubuntu-latest
     steps:
     - name: Checkout code

.github/workflows/release.yml

@@ -14,11 +14,18 @@ on:
     - .pre-commit-hooks.yaml
     # Ignore paths
     - '!tests/**'
+
 permissions:
   contents: read
 
 jobs:
   release:
+    permissions:
+      # for cycjimmy/semantic-release-action to create a release
+      contents: write
+      # for cycjimmy/semantic-release-action to write comments to issues
+      issues: write
+
     name: Release
     runs-on: ubuntu-latest
     steps: