Set toplevel github token permissions to read (#24)

.github/workflows/build.yml

@@ -11,7 +11,9 @@ on:
         required: true
         type: string
         description: "Profiler version to use for the build"
-
+
+permissions: read-all
+
 jobs:
   lint:
     name: Lint

.github/workflows/codeql-analysis.yml

@@ -14,6 +14,8 @@ on:
   schedule:
     - cron: '34 1 * * 0'
 
+permissions: read-all
+
 jobs:
   analyze:
     name: Analyze (Go)

.github/workflows/govulncheck.yml

@@ -14,6 +14,8 @@ on:
     - cron: '00 00 * * *'
   workflow_dispatch:
 
+permissions: read-all
+
 jobs:
   govulncheck-tests:
     runs-on: ubuntu-latest

.github/workflows/ossf-scorecard.yml

@@ -8,6 +8,8 @@ on:
   push:
     branches: [ "main" ]
 
+permissions: read-all
+
 jobs:
   analysis:
     name: Scorecard analysis

.github/workflows/pre-release.yaml

@@ -7,6 +7,8 @@ on:
     types: [opened, synchronize, reopened, labeled]
     branches: ["**"]
 
+permissions: read-all
+
 concurrency:
   group: ${{ github.ref }}
   cancel-in-progress: true

.github/workflows/release.yml

@@ -5,6 +5,8 @@ on:
     tags:
       - 'v*'
 
+permissions: read-all
+
 jobs:
   versions:
     name: Determine versions