Refactor permissions in workflow files: update permissions to write for contents, packages, and actions in main pipeline, docker, and deploy workflows.

Author: karimzakzouk

.github/workflows/deploy.yml

@@ -26,10 +26,6 @@ jobs:
     name: Deploy to Kubernetes
     runs-on: ubuntu-latest
     environment: production
-    permissions:
-      contents: write
-      actions: read
-    
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v5

.github/workflows/docker.yml

@@ -14,11 +14,6 @@ on:
         description: "Docker image tag"
         value: ${{ jobs.docker-build.outputs.image-tag }}
 
-permissions:
-  contents: write
-  packages: write
-  id-token: write
-
 env:
   MONGO_URI: ${{ secrets.MONGO_URI }}
   MONGO_USERNAME: ${{ secrets.MONGO_USERNAME }}
@@ -28,9 +23,7 @@ jobs:
   docker-build:
     name: Docker Build and Test
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
+
     outputs:
       image-tag: ${{ github.sha }}
 

.github/workflows/main-pipeline.yml

@@ -1,5 +1,4 @@
 name: Solar System - Main Pipeline
-
 on:
   workflow_dispatch:
     inputs:
@@ -36,15 +35,21 @@ jobs:
     if: ${{ !inputs.skip-tests }}
     uses: ./.github/workflows/ci.yml
     secrets: inherit
+    permissions:  
+      contents: write
+      packages: write
+      id-token: write
+      actions: read
 
   docker:
     name: Build Docker Image
     if: ${{ !inputs.skip-docker && (success() || inputs.skip-tests) }}
     needs: [ci]
     permissions:
-      contents: read
+      contents: write    
       packages: write
       id-token: write
+      actions: read
     uses: ./.github/workflows/docker.yml
     secrets: inherit
     with:
@@ -56,6 +61,11 @@ jobs:
     needs: [docker]
     uses: ./.github/workflows/terraform.yml
     secrets: inherit
+    permissions:
+      contents: write
+      packages: write
+      id-token: write
+      actions: read
     with:
       terraform-action: 'apply'
 
@@ -65,5 +75,10 @@ jobs:
     needs: [terraform, docker]
     uses: ./.github/workflows/deploy.yml
     secrets: inherit
+    permissions:
+      contents: write
+      packages: write
+      id-token: write
+      actions: read
     with:
-      image-tag: ${{ github.sha }}
+      image-tag: ${{ github.sha }}