permissions read (#1365)

Author: adhami3310

.github/workflows/codespell.yml

@@ -4,6 +4,9 @@ on:
   pull_request:
     branches: [main]
 
+permissions:
+  contents: read
+
 jobs:
   codespell:
     name: Check for spelling errors

.github/workflows/deploy-dev.yml

@@ -10,6 +10,9 @@ concurrency:
   group: deploy-dev
   cancel-in-progress: false
 
+permissions:
+  contents: read
+
 env:
   CP_WEB_URL: https://cloud.rxc.app/
   CP_BACKEND_URL: https://cloud-f188e2cd-51fb-4b29-b546-2ce4b9efc5d5.fly.dev/

.github/workflows/deploy-prd.yml

@@ -8,6 +8,9 @@ concurrency:
   group: deploy-prod
   cancel-in-progress: false
 
+permissions:
+  contents: read
+
 env:
   FLY_API_TOKEN: ${{ secrets.PRD_FLY_API_TOKEN }}
 

.github/workflows/deploy-stg.yml

@@ -9,6 +9,9 @@ concurrency:
   group: deploy-staging
   cancel-in-progress: false
 
+permissions:
+  contents: read
+
 env:
   FLY_API_TOKEN: ${{ secrets.STG_FLY_API_TOKEN }}
   CP_WEB_URL: https://cloud.reflexcorp.run/

.github/workflows/whitelist.yml

@@ -3,10 +3,13 @@ name: whitelist check
 on:
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   reflex-web:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
       - name: Assert whitelist is empty
-        run:  echo -e "\nassert not WHITELISTED_PAGES, f'WHITELISTED_PAGES includes {WHITELISTED_PAGES}'" | cat "pcweb/whitelist.py" - | python3
+        run: echo -e "\nassert not WHITELISTED_PAGES, f'WHITELISTED_PAGES includes {WHITELISTED_PAGES}'" | cat "pcweb/whitelist.py" - | python3