Set permissions for GitHub actions(chore:)

[naveensrinivasan]

Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

• Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests

Signed-off-by: naveen 172697+naveensrinivasan@users.noreply.github.com

[alluxio-bot]

Automated checks report:

• Commits associated with Github account: PASS
• PR title follows the conventions: FAIL
  • The title of the PR does not pass all the checks. Please fix the following issues:
    • First word must be capitalized
    • First word of title ("chore:") is not an imperative verb. Please use one of the valid words

Some checks failed. Please fix the reported issues and reply 'alluxio-bot, check this please' to re-run checks.

[Xenorith]

thanks for surfacing this potential security issue. i've also changed the workflow permissions on the organizational level such that the GITHUB_TOKEN only has read permissions

[naveensrinivasan]

thanks for surfacing this potential security issue. i've also changed the workflow permissions on the organizational level such that the GITHUB_TOKEN only has read permissions

👍

[HelloHorizon]

@naveensrinivasan we need the CLA signed before we merge the code, do you mind sending me your email address to me(shouwei@alluxio.com) thus I can send you the CLA?

[naveensrinivasan]

@naveensrinivasan we need the CLA signed before we merge the code, do you mind sending me your email address to me(shouwei@alluxio.com) thus I can send you the CLA?

Thanks, I will do it.

[naveensrinivasan]

@naveensrinivasan we need the CLA signed before we merge the code, do you mind sending me your email address to me(shouwei@alluxio.com) thus I can send you the CLA?

Thanks, I will do it.

I have emailed it. Thanks

[alluxio-bot]

Automated checks report:

• Commits associated with Github account: PASS
• PR title follows the conventions: PASS

All checks passed!

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed in two weeks if no further activity occurs. Thank you for your contributions.

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed in two weeks if no further activity occurs. Thank you for your contributions.

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed in two weeks if no further activity occurs. Thank you for your contributions.