ci: add read-only permissions to validation workflows

Signed-off-by: Yashagarwal9798 <yashagarwal9798@gmail.com>

Author: Yashagarwal9798

.github/workflows/build.yaml

@@ -12,6 +12,9 @@ on:
       - 'release-v*'
       - 'feat/*'
 
+permissions:
+  contents: read
+
 env:
   GO_VERSION: 1.26.2
   NODE_VERSION: 20.19.0

.github/workflows/build_tool.yaml

@@ -8,6 +8,9 @@ on:
     paths:
       - tool/**
 
+permissions:
+  contents: read
+
 env:
   REGISTRY: ghcr.io
 

.github/workflows/gen.yaml

@@ -4,6 +4,9 @@ on:
   pull_request:
     branches: [ master ]
 
+permissions:
+  contents: read
+
 jobs:
   code:
     runs-on: ubuntu-24.04

.github/workflows/test.yaml

@@ -14,6 +14,10 @@ on:
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+permissions:
+  contents: read
+
 env:
   GO_VERSION: 1.26.2
   NODE_VERSION: 20.19.0