ci: adjust permissions so that comments can be put on prs and issues (#1277)

* ci: adjust permissions so that semantic-release can post comments

* ci: harden permissions for `commitlint` and `danger` jobs

Author: G-Rath

.github/workflows/lint.yml

@@ -1,6 +1,9 @@
 name: Lint
 on: [pull_request]
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
   commitlint:
     runs-on: ubuntu-latest
@@ -14,6 +17,10 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
   danger:
+    permissions:
+      contents: read # to fetch code (actions/checkout)
+      issues: write # to create comment
+      pull-requests: write # to create comment
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3

.github/workflows/nodejs.yml

@@ -130,6 +130,8 @@ jobs:
   release:
     permissions:
       contents: write # for semantic-release
+      issues: write # to create comment
+      pull-requests: write # to create comment
 
     if:
       # prettier-ignore