[github workflows] add permissions

Author: thypon

.github/workflows/add-maintainer-custom-property.yml

@@ -5,6 +5,8 @@ on:
   schedule:
     - cron: '0 0 27 * *'
   workflow_dispatch:
+permissions: {}
+
 jobs:
   run:
     runs-on: ubuntu-latest
@@ -14,4 +16,4 @@ jobs:
           ignore_maintainers: brave-builds,brave-browser-releases,brave-support-admin
           debug: false
           github_token: ${{ secrets.CUSTOM_PROPERTY_MANAGER_GITHUB_TOKEN }}
-          slack_token: ${{ secrets.HOTSPOTS_SLACK_TOKEN }}
+          slack_token: ${{ secrets.HOTSPOTS_SLACK_TOKEN }}

.github/workflows/add-runtime-custom-property.yml

@@ -5,6 +5,8 @@ on:
   schedule:
     - cron: '0 0 22 * *'
   workflow_dispatch:
+permissions: {}
+
 jobs:
   run:
     runs-on: ubuntu-latest
@@ -17,4 +19,4 @@ jobs:
         with:
           github_token: ${{ secrets.CUSTOM_PROPERTY_MANAGER_GITHUB_TOKEN }}
           static_repositories: ${{ secrets.STATIC_WEBSITE_REPOSITORIES }}
-          runtime_directory: ${{ github.workspace }}
+          runtime_directory: ${{ github.workspace }}

.github/workflows/check-new-repos.yml

@@ -4,6 +4,8 @@ on:
     # nightly (0th hour 0th minute of every day)
     - cron: '0 0 * * *'
   workflow_dispatch:
+permissions: {}
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -13,4 +15,4 @@ jobs:
         with:
           github_token: ${{ secrets.ORG_READ_GITHUB_TOKEN }}
           slack_token: ${{ secrets.HOTSPOTS_SLACK_TOKEN }}
-          debug: false
+          debug: false

.github/workflows/copy-repo-secrets-to-org-secrets.yml

@@ -3,6 +3,8 @@ on:
   workflow_dispatch:
   schedule:
     - cron: '30 1 * * *'
+permissions: {}
+
 jobs:
   copy-secrets:
     runs-on: ubuntu-latest

.github/workflows/dependabot-auto-dismiss.yml

@@ -4,6 +4,8 @@ on:
     # Run at 24:00 UTC every Monday
     - cron: "0 0 * * 1"
   workflow_dispatch:
+permissions: {}
+
 jobs:
   run:
     runs-on: ubuntu-latest
@@ -13,4 +15,4 @@ jobs:
         with:
           github_token: ${{ secrets.DEPENDABOT_AUTO_DISMISS_GITHUB_TOKEN }}
           slack_token: ${{ secrets.HOTSPOTS_SLACK_TOKEN }}
-          debug: false
+          debug: false

.github/workflows/dependabot-nudge.yml

@@ -4,6 +4,8 @@ on:
     # Run at 17 UTC (9-ish am Pacific) every Monday
     - cron: "0 17 * * 1"
   workflow_dispatch:
+permissions: {}
+
 jobs:
   run:
     runs-on: ubuntu-latest

.github/workflows/older-than-2y.yml

@@ -4,6 +4,8 @@ on:
     # Every month, first day of the month
     - cron: '0 0 1 * *'
   workflow_dispatch:
+permissions: {}
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -13,4 +15,4 @@ jobs:
         with:
           github_token: ${{ secrets.ORG_READ_GITHUB_TOKEN }}
           slack_token: ${{ secrets.HOTSPOTS_SLACK_TOKEN }}
-          debug: false
+          debug: false

.github/workflows/renovate-sanity-check.yml

@@ -5,6 +5,8 @@ on:
   schedule:
     - cron: '0 0 15 * *'
   workflow_dispatch:
+permissions: {}
+
 jobs:
   run:
     runs-on: ubuntu-latest
@@ -14,4 +16,4 @@ jobs:
         with:
           github_token: ${{ secrets.CUSTOM_PROPERTY_MANAGER_GITHUB_TOKEN }}
           slack_token: ${{ secrets.HOTSPOTS_SLACK_TOKEN }}
-          debug: false
+          debug: false