Add workflow permissions (#282)

Author: chrmarti

.github/workflows/ci_branch.yml

@@ -16,6 +16,10 @@ on:
         type: boolean
         required: false
 
+permissions:
+  contents: write
+  packages: write
+
 jobs:
   build-test-publish:
     name: "Build, test, publish"

.github/workflows/ci_common.yml

@@ -50,6 +50,10 @@ on:
         description: ""
         required: true
 
+permissions:
+  contents: write
+  packages: write
+
 jobs:
   build: # run build using the github action!
     runs-on: ubuntu-latest

.github/workflows/ci_main.yml

@@ -7,6 +7,10 @@ on:
     branches: [main]
   workflow_dispatch:
 
+permissions:
+  contents: write
+  packages: write
+
 jobs:
   build-test-publish:
     name: "Build, test, publish"

.github/workflows/pr-bot.yml

@@ -9,7 +9,9 @@ on:
     # https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#issue_comment
     # https://docs.github.com/en/developers/webhooks-and-events/webhooks/webhook-events-and-payloads#issue_comment
 
-
+permissions:
+  contents: write
+  packages: write
 
 jobs:
   pr_comment:

.github/workflows/pr_auto.yml

@@ -10,6 +10,10 @@ on:
       - README.md
       - 'docs/**'
 
+permissions:
+  contents: write
+  packages: write
+
 jobs:
   build-test:
     name: "Build, test, publish"