feat(github): Force default permissions of GITHUB_TOKEN (#48)

* feat(github): Force default permissions of GITHUB_TOKEN

* feat(codeowners): assign to correct team

* feat(slapr): update the channel id

.github/CODEOWNERS

@@ -7,4 +7,4 @@
 # Rules are matched bottom-to-top, so one team can own subdirectories
 # and another the rest of the directory.
 
-/.*                                     @DataDog/agent-platform
+/.*                                     @DataDog/agent-devx-loops

.github/workflows/run_unit_tests.yml

@@ -3,6 +3,8 @@ name: Python Tests
 
 on: [push, pull_request]
 
+permissions: {}
+
 jobs:
   test:
     runs-on: ubuntu-latest
@@ -12,7 +14,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: 3.x
 

.github/workflows/slapr.yml

@@ -7,14 +7,16 @@ on:
   pull_request:
     types: [closed]
 
+permissions: {}
+
 jobs:
   run_slapr:
     runs-on: ubuntu-latest
     steps:
     - uses: DataDog/slapr@master
       env:
         GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
-        SLACK_CHANNEL_ID: CNY5XCHAA
+        SLACK_CHANNEL_ID: C06P4TAJ2Q6
         SLACK_API_TOKEN: "${{ secrets.SLACK_BOT_USER_OAUTH_ACCESS_TOKEN }}"
         SLAPR_BOT_USER_ID: UTMS06TPX
         SLAPR_EMOJI_REVIEW_STARTED: "review_started"