ci: add explicit least permissions to workflows (#12813)

Signed-off-by: Abhishek Choudhary <shreemaan.abhishek@gmail.com>

Author: shreemaan-abhishek

.github/workflows/check-changelog.yml

@@ -10,6 +10,10 @@ on:
       - 'CHANGELOG.md'
       - 'ci/check_changelog_prs.ts'
 
+
+permissions:
+  contents: read
+
 jobs:
   check-changelog:
     runs-on: ubuntu-latest

.github/workflows/license-checker.yml

@@ -24,6 +24,9 @@ on:
   pull_request:
     branches: [master, 'release/**']
 
+permissions:
+  contents: read
+
 jobs:
   check-license:
     runs-on: ubuntu-latest

.github/workflows/push-dev-image-on-commit.yml

@@ -11,6 +11,9 @@ on:
       - "**/*.md"
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   build-test-push:
     strategy:

.github/workflows/semantic.yml

@@ -7,6 +7,10 @@ on:
       - edited
       - synchronize
 
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   main:
     name: Validate PR title