make permissions global so apply across actions

Author: hturner

.github/workflows/build-and-publish-image.yml

@@ -16,6 +16,9 @@ on:
       - 'reinstall-cmake.sh'
       - 'VERSION'
 
+permissions:
+  contents: read
+  packages: write
 
 env:
   REGISTRY: ghcr.io
@@ -27,9 +30,6 @@ jobs:
       github.event_name == 'workflow_dispatch' ||
       (github.event_name == 'pull_request' && github.event.pull_request.merged == true)
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
 
     steps:
       - name: Checkout repository

.github/workflows/build-gitpod-image.yml

@@ -17,6 +17,9 @@ on:
       - 'reinstall-cmake.sh'
       - 'VERSION'
 
+permissions:
+  contents: read
+  packages: write
 
 env:
   REGISTRY: ghcr.io
@@ -28,9 +31,6 @@ jobs:
       github.event_name == 'workflow_dispatch' ||
       (github.event_name == 'pull_request' && github.event.pull_request.merged == true)
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
 
     steps:
       - name: Checkout repository

.github/workflows/schedule-docker-build.yml

@@ -4,6 +4,9 @@ on:
   schedule:
     - cron: '0 0 1,15 * *'
 
+permissions:
+  contents: read
+  packages: write
 
 env:
   REGISTRY: ghcr.io
@@ -12,9 +15,6 @@ env:
 jobs:
   build-and-push-image:
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
     strategy:
       matrix:
         branch: [main, devel]