Merge pull request strapi#14746 from sashashura/patch-4

Author: alexandrebodin

.github/workflows/addToProject.yml

@@ -6,6 +6,7 @@ on:
       - opened
       - transferred
 
+permissions: {}
 jobs:
   add-to-project:
     name: Add issue to Support Team project

.github/workflows/contributor-doc.yml

@@ -17,8 +17,12 @@ defaults:
   run:
     working-directory: docs
 
+permissions: {}
 jobs:
   deploy:
+    permissions:
+      contents: write  #  to push pages branch (peaceiris/actions-gh-pages)
+
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}

.github/workflows/nightly.yml

@@ -5,6 +5,9 @@ on:
     - cron: '0 0 * * 2-6'
   workflow_dispatch:
 
+permissions:
+  contents: read  #  to fetch code (actions/checkout)
+
 jobs:
   publish:
     name: 'Publish'

.github/workflows/tests.yml

@@ -13,6 +13,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref_name }}
   cancel-in-progress: true
 
+permissions:
+  contents: read  #  to fetch code (actions/checkout)
+
 jobs:
   lint:
     name: 'lint (node: ${{ matrix.node }})'