update workflow (#457)

Author: itsmylife

.github/workflows/add-to-project.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - id: get-secrets
-        uses: grafana/shared-workflows/actions/get-vault-secrets@main
+        uses: grafana/shared-workflows/actions/get-vault-secrets@main # zizmor: ignore[unpinned-uses]
         with:
           repo_secrets: |
             GITHUB_APP_ID=grafana-oss-big-tent:app-id

.github/workflows/publish.yaml

@@ -1,5 +1,6 @@
 name: Plugins - CD
 run-name: Deploy ${{ inputs.branch }} to ${{ inputs.environment }} by @${{ github.actor }}
+permissions: {}
 
 on:
   workflow_dispatch:

.github/workflows/push.yaml

@@ -1,4 +1,5 @@
 name: Plugins - CI
+permissions: {}
 
 on:
   push:

.github/workflows/update-make-docs.yml

@@ -1,4 +1,6 @@
 name: Update `make docs` procedure
+permissions: {}
+
 on:
   schedule:
     - cron: '0 7 * * 1-5'
@@ -9,7 +11,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: grafana/writers-toolkit/update-make-docs@update-make-docs/v1
+        with:
+          persist-credentials: false
+      - uses: grafana/writers-toolkit/update-make-docs@update-make-docs/v1 # zizmor: ignore[unpinned-uses]
         with:
           pr_options: >
             --label type/docs