ci: scope down GitHub Token permissions (#607)

AdnaneKhan · web-flow · commit 7993c1f170ff · 2025-10-24T12:59:03.000-04:00
* ci: scope down permissions for api_diff_check.yml

* ci: scope down permissions for labeler.yml

* ci: scope down permissions for go.yml

* ci: scope down permissions for codegen.yml
diff --git a/.github/workflows/api_diff_check.yml b/.github/workflows/api_diff_check.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ '*' ]
 
+permissions:
+  contents: read
+
 jobs:
 
   build:
diff --git a/.github/workflows/codegen.yml b/.github/workflows/codegen.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
   codegen-test:
     name: SDK Codegen Test
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
   unit-tests:
     name: SDK Unit Tests
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
@@ -5,6 +5,9 @@ on:
     branches:
       - "main"
 
+permissions:
+  issues: write
+
 jobs:
   labeler:
     runs-on: ubuntu-latest
