ci: scope down GitHub Token permissions

.github/workflows/build-events.yml

@@ -10,6 +10,9 @@ on:
       - "lambda-events/**"
       - "Cargo.toml"
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest

.github/workflows/build-extension.yml

@@ -16,6 +16,9 @@ on:
       - 'Cargo.toml'
 
 
+permissions:
+  contents: read
+
 jobs:
   build-runtime:
     runs-on: ubuntu-latest

.github/workflows/build-integration-test.yml

@@ -17,6 +17,9 @@ on:
       - 'lambda-extension/**'
       - 'Cargo.toml'
 
+permissions:
+  contents: read
+
 jobs:
   build-runtime:
     runs-on: ubuntu-latest

.github/workflows/build-runtime.yml

@@ -15,6 +15,9 @@ on:
       - 'lambda-http/**'
       - 'Cargo.toml'
 
+permissions:
+  contents: read
+
 jobs:
   build-runtime:
     runs-on: ubuntu-latest

.github/workflows/check-docs.yml

@@ -21,6 +21,9 @@ on:
       - 'lambda-extension/**'
       - 'Cargo.toml'
 
+permissions:
+  contents: read
+
 jobs:
   build-runtime:
     runs-on: ubuntu-latest

.github/workflows/check-examples.yml

@@ -5,6 +5,9 @@ on:
     branches: [main]
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   check:
     runs-on: ubuntu-latest

.github/workflows/closed-issue-message.yml

@@ -2,6 +2,9 @@ name: Closed Issue Message
 on:
     issues:
        types: [closed]
+permissions:
+  issues: write
+
 jobs:
     auto_comment:
         runs-on: ubuntu-latest

.github/workflows/format.yml

@@ -2,6 +2,9 @@ name: Formatting and Linting
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   fmt:
     name: Cargo fmt

.github/workflows/test-rie.yml

@@ -6,6 +6,9 @@ on:
   push:
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
   test-rie:
     runs-on: ubuntu-latest