[Sec] least privilege for actions (#241)

Author: haochengxia

.github/workflows/code-quality.yml

@@ -2,6 +2,9 @@ name: Code Quality
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   code-quality:
     name: Code Quality Checks

.github/workflows/npm-release.yml

@@ -9,6 +9,10 @@ on:
     paths:
       - 'libCacheSim-node/**'
 
+permissions:
+  contents: write  # Needed for creating releases and accessing repository contents
+  actions: read    # Needed for workflow actions
+
 env:
   BUILD_TYPE: Release
 

.github/workflows/scorecard.yml

@@ -15,7 +15,9 @@ on:
     branches: [ "develop" ]
 
 # Declare default permissions as read only.
-permissions: read-all
+permissions:
+  contents: read
+  actions: read
 
 jobs:
   analysis: