clean up ci permissions and update golangci-lint

Author: cpanato

.github/workflows/build-samples.yml

@@ -7,6 +7,8 @@ on:
     branches: [ "main" ]
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   # Build a single-arch nginx image for each arch.
   build-nginx-on-all-arches:

.github/workflows/build.yaml

@@ -6,6 +6,8 @@ on:
   push:
     branches: [ "main" ]
 
+permissions: {}
+
 jobs:
   build:
     name: build

.github/workflows/codeql.yml

@@ -19,6 +19,8 @@ on:
   schedule:
     - cron: '36 8 * * 6'
 
+permissions: {}
+
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})

.github/workflows/go-tests.yaml

@@ -6,6 +6,8 @@ on:
   pull_request:
     branches: [ "main" ]
 
+permissions: {}
+
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/release.yaml

@@ -6,6 +6,8 @@ on:
     tags:
     - 'v*' # Push events to matching v*, i.e. v1.0, v20.15.10
 
+permissions: {}
+
 jobs:
   cli:
     # Only release CLI for tagged releases

.github/workflows/verify.yaml

@@ -6,6 +6,8 @@ on:
   pull_request:
     branches: [ "main" ]
 
+permissions: {}
+
 jobs:
   golangci:
     name: lint
@@ -24,7 +26,7 @@ jobs:
       - name: golangci-lint
         uses: golangci/golangci-lint-action@e60da84bfae8c7920a47be973d75e15710aa8bd7 # v6.3.0
         with:
-          version: v1.61
+          version: v1.63
 
       - run: |
           make generate