github/workflow: Define permissions for actions

Avoid granting excessive permissions.

Signed-off-by: Jianxin Xiong <[email protected]>

.github/workflows/clang-format-check.yml

@@ -1,5 +1,7 @@
 name: clang-format Check
 on: [push, pull_request]
+permissions:
+  contents: read
 jobs:
   formatting-check:
     name: Formatting Check

.github/workflows/coverity.yml

@@ -4,6 +4,10 @@ on:
   # UTC time, 'minute hour day-of-month month day-of-week'
   - cron: '0 5 * * *'
 
+permissions:
+  contents: read
+  environments: read
+
 env:
   APT_PACKAGES: >-
     abi-compliance-checker

.github/workflows/gh-man.yaml

@@ -13,6 +13,9 @@ jobs:
     gh-man-update:
         name: GH Man Page Updater
         runs-on: ubuntu-latest
+        permissions:
+          contents: read
+          pull-requests: write
         steps:
           - name: Debug information
             env:

.github/workflows/nroff-elves.yaml

@@ -11,6 +11,9 @@ jobs:
     nroff-elves-scheduled:
         name: The Nroff Elves
         runs-on: ubuntu-latest
+        permissions:
+          contents: read
+          pull-requests: write
         steps:
           - name: Debug information
             env:

.github/workflows/pr-ci.yml

@@ -1,5 +1,8 @@
 name: Build Checks
 on: [push, pull_request]
+permissions:
+  contents: read
+  pull-requests: read
 env:
   APT_PACKAGES: >-
     abi-compliance-checker