Add specific permissions to workflows under .github/workflows

.github/workflows/builder.yml

@@ -21,6 +21,8 @@ on:
 env:
   PRODUCT: wayback
 
+permissions: write-all
+
 jobs:
   build:
     name: Build

.github/workflows/codeql-analysis.yml

@@ -21,6 +21,8 @@ on:
   schedule:
     - cron: '33 23 * * 4'
 
+permissions: write-all
+
 jobs:
   analyze:
     name: Analyze

.github/workflows/dispatch.yml

@@ -4,6 +4,8 @@ on:
   release:
     types: [published]
 
+permissions: {}
+
 jobs:
   release-brew:
     if: github.repository == 'wabarc/wayback'

.github/workflows/docker.yml

@@ -19,6 +19,8 @@ on:
       - 'snapcraft.yaml'
   workflow_dispatch:
 
+permissions: write-all
+
 jobs:
   publish:
     if: github.repository == 'wabarc/wayback'

.github/workflows/linter.yml

@@ -9,6 +9,8 @@ on:
       - '**'
     types: [ opened, synchronize, reopened ]
 
+permissions: write-all
+
 jobs:
   lint:
     runs-on: ubuntu-latest

.github/workflows/release.yml

@@ -8,6 +8,8 @@ on:
 env:
   PRODUCT: wayback
 
+permissions: write-all
+
 jobs:
   build:
     name: Build

.github/workflows/snapcraft.yml

@@ -6,6 +6,8 @@ on:
       - 'v*' # Push events to matching v*, i.e. v1.0, v20.15.10
   workflow_dispatch:
 
+permissions: write-all
+
 jobs:
   snapcraft:
     runs-on: ubuntu-latest

.github/workflows/stale.yml

@@ -4,6 +4,10 @@ on:
   schedule:
     - cron: "0 3 * * 6"
 
+permissions:
+  issues: write
+  pull-requests: write
+
 jobs:
   stale:
     name: Stale

.github/workflows/testing.yml

@@ -21,6 +21,8 @@ on:
       - "Makefile"
   workflow_dispatch:
 
+permissions: write-all
+
 jobs:
   testing:
     name: Testing