Merge pull request #6459 from github/add-actions-permissions

Add actions permissions

Author: taladrane

.github/workflows/create_staging_branch.yaml

@@ -8,6 +8,10 @@ on:
       - "advisories/**"
   workflow_dispatch:
 
+permissions:
+  contents: write        # Required to create and push branches
+  pull-requests: write   # Required to edit PR base branch
+
 jobs:
   ensure-base-is-staging:
     runs-on: ubuntu-latest

.github/workflows/delete_staging_and_head_branches.yaml

@@ -8,6 +8,9 @@ on:
       - "advisories/**"
   workflow_dispatch:
 
+permissions:
+  contents: write   # Required to delete branches
+
 jobs:
   delete-staging-and-head-branches:
     if: ${{ !github.event.pull_request.head.repo.fork }}

.github/workflows/stale.yaml

@@ -4,6 +4,9 @@ on:
   schedule:
   - cron: "00 0 * * *" # runs at 00:00 daily
 
+permissions:
+  pull-requests: write   # Required to comment on, label, and close PRs
+
 jobs:
   stale: