ci: install GitHubSecurityLab/actions-permissions

Author: panva

.github/workflows/conformance.yml

@@ -76,6 +76,7 @@ jobs:
               fapi_client_type: 'plain_oauth'
 
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - name: Checkout
         uses: actions/checkout@v4
       - name: Load Cached Conformance Suite Build

.github/workflows/lock.yml

@@ -9,6 +9,7 @@ jobs:
     continue-on-error: true
     runs-on: ubuntu-latest
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - uses: dessant/lock-threads@1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771 # v5.0.1
         with:
           github-token: ${{ github.token }}

.github/workflows/release.yml

@@ -10,6 +10,7 @@ jobs:
     permissions:
       id-token: write
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - name: Checkout
         uses: actions/checkout@v4
         with:
@@ -30,6 +31,7 @@ jobs:
       contents: read
       id-token: write
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
@@ -43,6 +45,7 @@ jobs:
     permissions:
       contents: write
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - name: Checkout
         uses: actions/checkout@v4
         with:
@@ -61,6 +64,7 @@ jobs:
       - jsr
     runs-on: ubuntu-latest
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - name: Checkout
         uses: actions/checkout@v4
         with:

.github/workflows/retry.yml

@@ -13,6 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.event.workflow_run.conclusion == 'failure' && github.event.workflow_run.run_attempt == 1 }}
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - run: gh api -XPOST ${{ github.event.workflow_run.rerun_url }}-failed-jobs
         env:
           GH_TOKEN: ${{ github.token }}

.github/workflows/test.yml

@@ -13,6 +13,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - name: Checkout
         uses: actions/checkout@v4
       - name: Setup node
@@ -26,6 +27,7 @@ jobs:
   format:
     runs-on: ubuntu-latest
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - name: Checkout
         uses: actions/checkout@v4
       - name: Setup node
@@ -44,6 +46,7 @@ jobs:
       - build
       - format
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - name: Checkout
         uses: actions/checkout@v4
       - name: Setup node
@@ -77,6 +80,7 @@ jobs:
 
     runs-on: ubuntu-latest
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - name: Checkout
         uses: actions/checkout@v4
       - name: Setup node
@@ -102,6 +106,7 @@ jobs:
       - build
     runs-on: ubuntu-latest
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - name: Checkout
         uses: actions/checkout@v4
       - name: Setup node
@@ -128,6 +133,7 @@ jobs:
       - build
     runs-on: macos-15
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - name: Checkout
         uses: actions/checkout@v4
       - name: Setup node
@@ -153,6 +159,7 @@ jobs:
       - build
     runs-on: ubuntu-latest
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - name: Checkout
         uses: actions/checkout@v4
       - uses: denoland/setup-deno@v2
@@ -182,6 +189,7 @@ jobs:
       - build
     runs-on: ubuntu-latest
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - name: Checkout
         uses: actions/checkout@v4
       - name: Setup node
@@ -200,6 +208,7 @@ jobs:
       - build
     runs-on: ubuntu-latest
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - name: Checkout
         uses: actions/checkout@v4
       - uses: oven-sh/setup-bun@v2
@@ -242,6 +251,7 @@ jobs:
               name: safari
               id: safari
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
       - name: Checkout
         uses: actions/checkout@v4
       - name: Setup node