chore: set github action permissions (#834)

Signed-off-by: Rueian <[email protected]>

Author: rueian

.github/workflows/build.yml

@@ -1,5 +1,8 @@
 name: Go Modules Test
 
+permissions:
+  contents: read
+
 on: [push, pull_request]
 
 # https://docs.github.com/en/actions/learn-github-actions/expressions

.github/workflows/codeql.yml

@@ -1,5 +1,8 @@
 name: "CodeQL"
 
+permissions:
+  contents: read
+
 on:
   push:
     branches: [ "**" ]

.github/workflows/release-drafter.yml

@@ -6,7 +6,8 @@ on:
     branches:
       - main
 
-permissions: {}
+permissions:
+  contents: write
 jobs:
   update_release_draft:
     permissions:

.github/workflows/tag-subpkg.yml

@@ -1,5 +1,8 @@
 name: Tag Prefix Workflow
 
+permissions:
+  contents: write
+
 on:
   push:
     tags: