chore: add token permissions to GHA (#1590)

Author: alexandear

.github/workflows/build.yaml

@@ -7,6 +7,9 @@ on:
     branches:
       - master
 
+permissions:
+  contents: read
+
 jobs:
   build:
     name: Build

.github/workflows/lint.yaml

@@ -7,6 +7,9 @@ on:
     branches:
       - master
 
+permissions:
+  contents: read
+
 jobs:
   go-mod:
     runs-on: ubuntu-latest

.github/workflows/release.yml

@@ -5,9 +5,16 @@ on:
     tags:
       - '*'
 
+permissions:
+  contents: read
+
 jobs:
   goreleaser:
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+
     steps:
       -
         name: Checkout

.github/workflows/renovate.yaml

@@ -8,6 +8,9 @@ on:
     branches:
       - master
 
+permissions:
+  contents: read
+
 jobs:
   validate-renovate-config:
     name: Validate renovate.json

.github/workflows/test.yaml

@@ -7,6 +7,9 @@ on:
     branches:
       - master
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     name: Tests on ${{ matrix.os }} (Go ${{ matrix.go-version }})