chore: add explicit workflow permissions (lerna#4229)

Author: JamesHenry

.github/workflows/ci.yml

@@ -16,6 +16,10 @@ env:
   NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
   NX_VERBOSE_LOGGING: false
 
+# Minimal permissions by default
+permissions:
+  contents: read
+
 jobs:
   main:
     name: Nx Cloud - Main Job

.github/workflows/other-node-versions.yml

@@ -16,6 +16,10 @@ env:
   COREPACK_ENABLE_AUTO_PIN: "0"
   COREPACK_ENABLE_STRICT: "0"
 
+# Minimal permissions by default
+permissions:
+  contents: read
+
 jobs:
   set-node-versions:
     name: Set Node Versions

.github/workflows/website-deploy.yml

@@ -6,6 +6,10 @@ on:
   push:
     branches: [main]
 
+# Minimal permissions by default
+permissions:
+  contents: read
+
 defaults:
   run:
     shell: bash