ci: pipelines permissions (#487)

* Add permissions on pipelines

* Remove id-token permission

* Remove repository-projects permission

.github/workflows/multiframework-build.yml

@@ -4,6 +4,19 @@ on:
   workflow_dispatch:
   push:
     branches: [ main ]
+
+permissions:
+  actions: write
+  checks: write
+  contents: read
+  deployments: read
+  issues: write
+  discussions: write
+  packages: read
+  pages: write
+  pull-requests: write
+  security-events: write
+  statuses: write
 
 jobs:
   build:

.github/workflows/mutation-testing.yml

@@ -1,5 +1,19 @@
 name: Mutation testing
 on: workflow_dispatch
+
+permissions:
+  actions: write
+  checks: write
+  contents: read
+  deployments: read
+  issues: write
+  discussions: write
+  packages: read
+  pages: write
+  pull-requests: write
+  security-events: write
+  statuses: write
+
 jobs:
   mutation:
     name: Run mutation analysis

.github/workflows/net-build.yml

@@ -6,6 +6,19 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions:
+  actions: write
+  checks: write
+  contents: read
+  deployments: read
+  issues: write
+  discussions: write
+  packages: read
+  pages: write
+  pull-requests: write
+  security-events: write
+  statuses: write
+
 jobs:
   build:
     runs-on: windows-latest

.github/workflows/publish-nuget.yml

@@ -2,6 +2,20 @@ name: Nuget Release
 on:
   release:
     types: [ published ]
+
+permissions:
+  actions: write
+  checks: write
+  contents: read
+  deployments: read
+  issues: write
+  discussions: write
+  packages: read
+  pages: write
+  pull-requests: write
+  security-events: write
+  statuses: write
+
 jobs:
   coreSDK:
     runs-on: ubuntu-latest