Add permissions section to GitHub workflows

.github/workflows/PullRequest.yml

@@ -7,71 +7,74 @@ name: PullRequest
 
 on:
   push:
-    branches: [ main ]
+    branches: [main]
   pull_request:
     branches:
-    - main
-    - 'release/stable'
-    - 'features/PowerPagesAgent'
+      - main
+      - "release/stable"
+      - "features/PowerPagesAgent"
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
-        os: [ windows-latest, macos-latest, ubuntu-latest ]
+        os: [windows-latest, macos-latest, ubuntu-latest]
       fail-fast: false
 
     steps:
-    - uses: actions/checkout@v3
-      with:
-        lfs: true
-
-    - name: Setup .NET 9
-      uses: actions/setup-dotnet@v4
-      with:
-        dotnet-version: '9.0.x'
+      - uses: actions/checkout@v3
+        with:
+          lfs: true
 
-    - name: List installed .NET SDKs
-      run: dotnet --list-sdks
+      - name: Setup .NET 9
+        uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: "9.0.x"
 
-    - name: Setup Node.js environment
-      uses: actions/setup-node@v3
-      with:
-        node-version: 20
+      - name: List installed .NET SDKs
+        run: dotnet --list-sdks
 
-    # - name: Install dependencies
-    #   run: npm i -g npm
+      - name: Setup Node.js environment
+        uses: actions/setup-node@v3
+        with:
+          node-version: 20
 
-    - name: Build and unit test
-      run: |
-        npm ci
-        npm run dist
-      env:
-        AZ_DevOps_Read_PAT: ${{ secrets.AZ_DevOps_Read_PAT }}
+      # - name: Install dependencies
+      #   run: npm i -g npm
 
-    - name: Run Debugger integration tests
-      uses: coactions/setup-xvfb@v1
-      with:
+      - name: Build and unit test
         run: |
-         npm run test-integration
+          npm ci
+          npm run dist
+        env:
+          AZ_DevOps_Read_PAT: ${{ secrets.AZ_DevOps_Read_PAT }}
 
-    - name: Run Web integration tests
-      uses: coactions/setup-xvfb@v1
-      with:
-        run: |
-         npm run test-web-integration
+      - name: Run Debugger integration tests
+        uses: coactions/setup-xvfb@v1
+        with:
+          run: |
+            npm run test-integration
 
-    - name: Run Desktop integration tests
-      uses: coactions/setup-xvfb@v1
-      if: matrix.os == 'windows-latest'
-      with:
-        run: |
-         npm run test-desktop-int
+      - name: Run Web integration tests
+        uses: coactions/setup-xvfb@v1
+        with:
+          run: |
+            npm run test-web-integration
 
-    - name: Run Common integration tests
-      uses: coactions/setup-xvfb@v1
-      with:
-        run: |
-         npm run test-common-int
+      - name: Run Desktop integration tests
+        uses: coactions/setup-xvfb@v1
+        if: matrix.os == 'windows-latest'
+        with:
+          run: |
+            npm run test-desktop-int
+
+      - name: Run Common integration tests
+        uses: coactions/setup-xvfb@v1
+        with:
+          run: |
+            npm run test-common-int

.github/workflows/Snapshot.yml

@@ -9,29 +9,32 @@ on:
   workflow_dispatch:
     inputs:
       sourceSpec:
-        description: 'git source spec, e.g. branch, tag or commit id'
+        description: "git source spec, e.g. branch, tag or commit id"
         required: false
-        default: 'origin/main'
+        default: "origin/main"
       targetBranch:
-        description: 'target branch to snapshot the sourceSpec into'
+        description: "target branch to snapshot the sourceSpec into"
         required: false
-        default: 'release/stable'
+        default: "release/stable"
+
+permissions:
+  contents: write
 
 jobs:
   create-snapshot:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v3
-      with:
-        lfs: true
+      - uses: actions/checkout@v3
+        with:
+          lfs: true
 
-    - name: Setup Node.js environment
-      uses: actions/setup-node@v3
-      with:
-        node-version: 18
+      - name: Setup Node.js environment
+        uses: actions/setup-node@v3
+        with:
+          node-version: 18
 
-    - name: run snapshot gulp script
-      run: |
-        npm i
-        node node_modules/gulp/bin/gulp.js snapshot --sourceSpec ${{ github.event.inputs.sourceSpec }} --targetBranch ${{ github.event.inputs.targetBranch }} --repoToken ${{ secrets.GITHUB_TOKEN }}
+      - name: run snapshot gulp script
+        run: |
+          npm i
+          node node_modules/gulp/bin/gulp.js snapshot --sourceSpec ${{ github.event.inputs.sourceSpec }} --targetBranch ${{ github.event.inputs.targetBranch }} --repoToken ${{ secrets.GITHUB_TOKEN }}