Added explicit permissions to all GitHub action workflows

[jwngr]

Summary by CodeRabbit

• Chores
  • Updated automation workflows to refine permissions using least-privilege access.
  • Enabled workflows to run on pull request events for improved pre-merge checks.
  • Standardized push triggers for continuous integration to ensure consistent execution.
  • Preserved existing build, lint, and deploy steps without altering behavior.
  • No changes to application features or user experience; operational only.

[coderabbitai]

Caution

Review failed

The pull request is closed.

Walkthrough

The pull request updates three GitHub Actions workflows:

• firebase-hosting-merge.yml: adds a permissions block (contents: read).
• firebase-hosting-pull-request.yml: adds a pull_request trigger and a permissions block (checks, contents, pull-requests).
• frontend-ci.yml: adds a push trigger and a permissions block (contents: read).
  No steps, jobs, or deployment logic were modified. Changes are limited to triggers and workflow permissions configuration.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch jw-gh-action-workflow-perms

---

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

Cache: Disabled due to data retention organization setting

Knowledge base: Disabled due to data retention organization setting

📥 Commits

Reviewing files that changed from the base of the PR and between 5526a7d and 39ed08a.

📒 Files selected for processing (3)

• .github/workflows/firebase-hosting-merge.yml (1 hunks)
• .github/workflows/firebase-hosting-pull-request.yml (1 hunks)
• .github/workflows/frontend-ci.yml (1 hunks)

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

Visit the preview URL for this PR (updated for commit 39ed08a):

https://sdow-prod--pr306-jw-gh-action-workflo-sikv6hc2.web.app

_{(expires Sun, 19 Oct 2025 01:55:49 GMT)}

_{🔥 via Firebase Hosting GitHub Action 🌎}

_{Sign: d829a88f1c5f8068a7f433387f26312c0e637dc1}