chore: add permissions section to workflow YAML files (#123)

Author: ArthurTonial

.github/workflows/check-version-bump.yaml

@@ -5,6 +5,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   check-version-bump:
     name: Enforce version bump when src/ is modified

.github/workflows/commit-validation.yaml

@@ -8,6 +8,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   commit-validation:
     runs-on: ${{ contains(github.server_url, 'github.com') && 'ubuntu-latest' || fromJSON('["self-hosted"]') }}

.github/workflows/proto-verify.yaml

@@ -15,6 +15,9 @@ on:
       - 'src/sap_cloud_sdk/core/auditlog_ng/proto/**'
       - 'Makefile'
 
+permissions:
+  contents: read
+
 jobs:
   verify-proto:
     name: Verify generated proto code is up-to-date

.github/workflows/release-internal.yml

@@ -6,6 +6,9 @@ on:
       - main
     types: [opened, synchronize, reopened]
 
+permissions:
+  contents: read
+
 jobs:
   publish:
     name: Publish to Artifactory

.github/workflows/reuse.yaml

@@ -8,6 +8,9 @@ on:
     branches:
       - "main"
 
+permissions:
+  contents: read
+
 jobs:
   check-reuse-compliance:
     runs-on: ${{ contains(github.server_url, 'github.com') && 'ubuntu-latest' || fromJSON('["self-hosted"]') }}

.github/workflows/sync.yaml

@@ -5,6 +5,9 @@ on:
     - cron: '0 */3 * * *'
   workflow_dispatch:
 
+permissions:
+  contents: write
+
 jobs:
   sync:
     runs-on: ["self-hosted"]