Github Actions: set top level permissions (#2860) (#2861)

.github/workflows/atlas-image-build.yaml

@@ -1,5 +1,8 @@
 name: build-mongodb-atlas-tools-image
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
     inputs:

.github/workflows/grype-vulnerability-scanner.yaml

@@ -1,4 +1,6 @@
 name: container vulnerability scanning
+permissions:
+  contents: read
 on:
   workflow_dispatch:
   workflow_run:

.github/workflows/kanister-image-build.yaml

@@ -1,5 +1,8 @@
 name: build-kanister-image
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
     inputs:

.github/workflows/main.yaml

@@ -1,4 +1,6 @@
 name: Build and test
+permissions:
+  contents: read
 on:
   push:
     branches:

.github/workflows/stale.yaml

@@ -1,5 +1,8 @@
 name: Manage Stale Issues and PRs
 
+permissions:
+  contents: read
+
 on:
   schedule:
   - cron: "0 0 * * *"

.github/workflows/triage-issues.yaml

@@ -1,5 +1,8 @@
 name: Triage Issues
 
+permissions:
+  contents: read
+
 on:
   issues:
     types: