fix: workflow permissons

.github/workflows/coveralls.yml

@@ -10,6 +10,8 @@ jobs:
   build:
     name: Build
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/release_production.yml

@@ -10,6 +10,8 @@ jobs:
     name: Builds and Publishes to Cloudflare Pages Production
     environment: Production
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     outputs:
       RELEASE_VERSION: ${{ steps.extract_version.outputs.RELEASE_VERSION }}
     steps:
@@ -50,6 +52,8 @@ jobs:
     name: Send Slack Notification
     environment: Production
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     if: always()
     needs: [build_and_publish]
     steps:
@@ -75,6 +79,8 @@ jobs:
     name: Publish to Vercel DR
     runs-on: ubuntu-latest
     environment: Production
+    permissions:
+      contents: read
     needs: [build_and_publish]
     steps:
       - name: Checkout

.github/workflows/release_staging.yml

@@ -8,6 +8,8 @@ jobs:
     name: Builds and Publishes to Cloudflare Pages Staging
     runs-on: ubuntu-latest # TODO: Replace this with the appropriate runner for Deriv-Api-Docs when provided
     environment: Staging
+    permissions:
+      contents: read
     steps:
       - name: Checkout
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/release_test.yml

@@ -12,6 +12,8 @@ jobs:
     name: Builds and Publishes to Cloudflare Pages Test
     environment: Staging
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     outputs:
       RELEASE_VERSION: ${{ steps.extract_version.outputs.RELEASE_VERSION }}
     steps:

.github/workflows/translation_push.yml

@@ -6,6 +6,8 @@ on:
 jobs:
   crowdin-upload:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11