set explicit token permissions (#828)

Former-commit-id: 2923b24

Author: scottgigante-immunai

.github/workflows/check_r_dependencies.yml

@@ -16,6 +16,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   check-r-dependencies:
     runs-on: ubuntu-latest

.github/workflows/comment_pull_request.yml

@@ -4,6 +4,9 @@ on:
   pull_request_target:
     types: [opened, synchronize, reopened, ready_for_review]
 
+permissions:
+  pull-requests: write
+
 jobs:
   comment_pr:
 

.github/workflows/pre-commit.yml

@@ -6,6 +6,9 @@ on:
   pull_request:
     types: [opened, synchronize, reopened, ready_for_review]
 
+permissions:
+  contents: write
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true

.github/workflows/process_results.yml

@@ -11,6 +11,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   process_results:
     runs-on: ubuntu-latest

.github/workflows/run_tests.yml

@@ -10,6 +10,11 @@ on:
     types:
       - 'submitted'
 
+permissions:
+  contents: write
+  packages: write
+  pull-requests: write
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true

.github/workflows/update_website_content.yml

@@ -10,6 +10,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   update_content:
     runs-on: ubuntu-latest