update (slsa-framework#548)

Author: laurentsimon

.github/workflows/codeql-analysis.yml

@@ -20,6 +20,8 @@ on:
   schedule:
     - cron: "21 0 * * 2"
 
+permissions: read-all
+
 jobs:
   analyze:
     name: Analyze

.github/workflows/pre-submit.actions.yml

@@ -5,6 +5,8 @@ on:
     branches: [main]
   workflow_dispatch:
 
+permissions: read-all
+
 jobs:
   checkout:
     name: verify no checkout in Actions

.github/workflows/pre-submit.e2e.generic.default.yml

@@ -5,6 +5,8 @@ on:
     branches: [main]
   workflow_dispatch:
 
+permissions: read-all
+
 env:
   GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}