Add contents: read permission (#7906)

* workflow content update

* update checkout

* comment

server/src/workflows/2022-10-01/WorkflowService.ts

@@ -33,7 +33,8 @@ export class WorkflowService20221001 {
           tenant-id: \${{ secrets.__tenantidsecretname__ }}
           subscription-id: \${{ secrets.__subscriptionidsecretname__ }}\n`;
       const permssions = `permissions:
-      id-token: write #This is required for requesting the JWT\n`;
+      id-token: write #This is required for requesting the JWT
+      contents: read #This is required for actions/checkout\n`;
       const environment = `environment:
       name: '__slotname__'
       url: \${{ steps.deploy-to-webapp.outputs.webapp-url }}`;

server/src/workflows/2022-10-01/container-configs/container-functions-linux.config.yml

@@ -12,6 +12,9 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read #This is required for actions/checkout
+
     steps:
       - uses: actions/checkout@v4
 

server/src/workflows/2022-10-01/container-configs/container-webapp-linux.config.yml

@@ -12,6 +12,9 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read #This is required for actions/checkout
+
     steps:
       - uses: actions/checkout@v4
 

server/src/workflows/2022-10-01/function-app-configs/node-linux.config.yml

@@ -16,6 +16,9 @@ env:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read #This is required for actions/checkout
+
     steps:
       - name: 'Checkout GitHub Action'
         uses: actions/checkout@v4

server/src/workflows/2022-10-01/function-app-configs/node-windows.config.yml

@@ -16,6 +16,9 @@ env:
 jobs:
   build:
     runs-on: windows-latest
+    permissions:
+      contents: read #This is required for actions/checkout
+
     steps:
       - name: 'Checkout GitHub Action'
         uses: actions/checkout@v4

server/src/workflows/2022-10-01/function-app-configs/python-linux.config.yml

@@ -17,6 +17,9 @@ env:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read #This is required for actions/checkout
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4

server/src/workflows/2022-10-01/web-app-configs/aspnet-windows.config.yml

@@ -12,6 +12,8 @@ on:
 jobs:
   build:
     runs-on: windows-latest
+    permissions:
+      contents: read #This is required for actions/checkout
 
     steps:
       - uses: actions/checkout@v4

server/src/workflows/2022-10-01/web-app-configs/dotnetcore-linux.config.yml

@@ -12,6 +12,8 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read #This is required for actions/checkout
 
     steps:
       - uses: actions/checkout@v4

server/src/workflows/2022-10-01/web-app-configs/dotnetcore-windows.config.yml

@@ -12,6 +12,8 @@ on:
 jobs:
   build:
     runs-on: windows-latest
+    permissions:
+      contents: read #This is required for actions/checkout
 
     steps:
       - uses: actions/checkout@v4

server/src/workflows/2022-10-01/web-app-configs/java-jar-linux.config.yml

@@ -12,6 +12,8 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read #This is required for actions/checkout
 
     steps:
       - uses: actions/checkout@v4

server/src/workflows/2022-10-01/web-app-configs/java-jar-windows.config.yml

@@ -12,6 +12,8 @@ on:
 jobs:
   build:
     runs-on: windows-latest
+    permissions:
+      contents: read #This is required for actions/checkout
 
     steps:
       - uses: actions/checkout@v4

server/src/workflows/2022-10-01/web-app-configs/java-war-linux.config.yml

@@ -12,6 +12,8 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read #This is required for actions/checkout
 
     steps:
       - uses: actions/checkout@v4

server/src/workflows/2022-10-01/web-app-configs/java-war-windows.config.yml

@@ -12,6 +12,8 @@ on:
 jobs:
   build:
     runs-on: windows-latest
+    permissions:
+      contents: read #This is required for actions/checkout
 
     steps:
       - uses: actions/checkout@v4

server/src/workflows/2022-10-01/web-app-configs/node-linux-oryx.config.yml

@@ -12,6 +12,8 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read #This is required for actions/checkout
 
     steps:
       - uses: actions/checkout@v4

server/src/workflows/2022-10-01/web-app-configs/node-linux.config.yml

@@ -12,6 +12,8 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read #This is required for actions/checkout
 
     steps:
       - uses: actions/checkout@v4

server/src/workflows/2022-10-01/web-app-configs/node-windows.config.yml

@@ -12,6 +12,8 @@ on:
 jobs:
   build:
     runs-on: windows-latest
+    permissions:
+      contents: read #This is required for actions/checkout
 
     steps:
       - uses: actions/checkout@v4

server/src/workflows/2022-10-01/web-app-configs/php-linux.config.yml

@@ -12,6 +12,8 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read #This is required for actions/checkout
 
     steps:
       - uses: actions/checkout@v4

server/src/workflows/2022-10-01/web-app-configs/php-windows.config.yml

@@ -12,7 +12,9 @@ on:
 jobs:
   build:
     runs-on: windows-latest
-
+    permissions:
+      contents: read #This is required for actions/checkout
+
     steps:
       - uses: actions/checkout@v4
 

server/src/workflows/2022-10-01/web-app-configs/python-linux.config.yml

@@ -13,6 +13,8 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read #This is required for actions/checkout
 
     steps:
       - uses: actions/checkout@v4

server/src/workflows/2022-10-01/web-app-configs/wordpress-linux.config.yml

@@ -11,6 +11,8 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read #This is required for actions/checkout
 
     steps:
       - uses: actions/checkout@v4