chore: add permissions to pipelines

.github/workflows/build.yml

@@ -1,5 +1,8 @@
 name: "🧪 Build & test code"
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
   workflow_call:

.github/workflows/docs.yaml

@@ -1,5 +1,8 @@
 name: "📚 Publish Docs"
 
+permissions:
+  contents: write
+
 on:
   # Workflow dispatch is used for manual triggers
   workflow_dispatch:

.github/workflows/lint.yml

@@ -1,5 +1,8 @@
 name: '💎 Code quality'
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
   workflow_call:

.github/workflows/on-pr-to-main.yml

@@ -1,5 +1,9 @@
 name: '➕ Pull Request'
 
+permissions:
+  contents: read
+  pull-requests: write
+
 on:
   pull_request:
     types:

.github/workflows/on-push-any-branch.yml

@@ -1,5 +1,8 @@
 name: '✨ On push to any branch'
 
+permissions:
+  contents: read
+
 on:
   push:
     branches:

.github/workflows/on-push-main-branch.yml

@@ -5,6 +5,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: write
+
 jobs:
   publish-docs:
     name: '️‍📚️ Publish Docs'

.github/workflows/publish.yml

@@ -1,5 +1,8 @@
 name: 🚀 Upload Python Package
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
   workflow_call:

.github/workflows/release-please.yml

@@ -1,4 +1,10 @@
 name: 🎉 Release Please
+
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
+
 on:
   push:
     branches: