ci: set write permissions explicitly for jobs

Signed-off-by: László Várady <[email protected]>

.github/workflows/axosyslog-charts-release.yml

@@ -1,5 +1,7 @@
 name: AxoSyslog charts release
 
+permissions: write-all
+
 on:
   push:
     paths:

.github/workflows/axosyslog-docker.yml

@@ -1,5 +1,7 @@
 name: AxoSyslog Docker image builder
 
+permissions: write-all
+
 on:
   workflow_call:
     inputs:

.github/workflows/axosyslog-image-snapshot.yml

@@ -42,6 +42,7 @@ jobs:
           path: dbld/build/*.tar.*
 
   publish-image:
+    permissions: write-all
     uses: ./.github/workflows/axosyslog-docker.yml
     needs: tarball
     with:

.github/workflows/axosyslog-nightly.yml

@@ -1,5 +1,7 @@
 name: AxoSyslog nightly
 
+permissions: write-all
+
 on:
   workflow_dispatch:
   schedule:

.github/workflows/axosyslog-stable.yml

@@ -4,6 +4,8 @@
 
 name: AxoSyslog stable
 
+permissions: write-all
+
 on:
   workflow_dispatch:
   push:

.github/workflows/comment-cfg-grammar-changes.yml

@@ -1,5 +1,7 @@
 name: Comment config grammar changes (PR)
 
+permissions: write-all
+
 on:
   workflow_run:
     workflows: [Check config grammar changes (PR)]

.github/workflows/comment-on-version-bump-pr.yml

@@ -8,6 +8,8 @@
 
 name: Comment on version bump PR
 
+permissions: write-all
+
 on:
   push:
     branches:

.github/workflows/dbld-images.yml

@@ -1,5 +1,7 @@
 name: Compile dbld-images
 
+permissions: write-all
+
 on:
   pull_request:
     paths:

.github/workflows/draft-release.yml

@@ -14,6 +14,7 @@
 
 name: Draft release
 
+permissions: write-all
 
 on:
   workflow_dispatch:

.github/workflows/version-bump.yml

@@ -23,6 +23,8 @@
 
 name: Version bump
 
+permissions: write-all
+
 on:
   workflow_dispatch:
     inputs: