Cleanup for actions and workflows (#570)

Light cleanup for actions and workflows.
- Remove incorrect branch filters on `workflow_dispatch` triggers
- Update `pr_workflow` filters
- Add explicit read-level permissions where we checkout code

Signed-off-by: Angela Burton <angelab@nvidia.com>

Author: anjbur

.github/workflows/all_libs.yaml

@@ -16,6 +16,7 @@ jobs:
     container: ghcr.io/nvidia/cuda-quantum-devcontainer:${{ matrix.platform }}-cu${{ matrix.cuda_version }}-gcc12-main
     permissions:
       actions: write
+      contents: read
       pull-requests: read
     steps:
       - name: Checkout repository

.github/workflows/cudaq_cache.yaml

@@ -2,9 +2,6 @@ name: CUDAQ cache
 
 on:
   workflow_dispatch:
-    branches:
-      - main
-
   push:
     branches:
       - main
@@ -56,4 +53,3 @@ jobs:
           save-build: true
           save-ccache: true
           platform: ${{ matrix.platform }}-cu${{ steps.config.outputs.cuda_major }}
-

.github/workflows/docs.yaml

@@ -2,11 +2,7 @@ name: Documentation
 
 on:
   workflow_call:
-
   workflow_dispatch:
-    branches:
-      - main
-
   push:
     branches:
       - main

.github/workflows/lib_qec.yaml

@@ -16,6 +16,7 @@ jobs:
     container: ghcr.io/nvidia/cuda-quantum-devcontainer:${{ matrix.platform }}-cu${{ matrix.cuda_version }}-gcc12-main
     permissions:
       actions: write
+      contents: read
       pull-requests: read
     steps:
       - name: Checkout repository

.github/workflows/pr_workflow.yaml

@@ -40,8 +40,8 @@ jobs:
           base: ${{ fromJSON(steps.get-pr-info.outputs.pr-info).base.sha }}
           filters: |
             build-cudaq:
-              - '.github/workflows/cudaq_bump.yml'
               - '.github/actions/get-cudaq-build/**'
+              - '.github/actions/get-cudaq-version/**'
               - '.github/workflows/scripts/build_cudaq.sh'
               - '.cudaq_version'
             build-docs:
@@ -53,13 +53,14 @@ jobs:
             build-all:
               - '.github/actions/build-lib/action.yaml'
               - '.github/actions/build-lib/build_all.sh'
-              - '.github/actions/build-lib/build_all.yaml'
+              - '.github/actions/build-lib/setup_custabilizer.sh'
               - '.github/workflows/all_libs.yaml'
               - 'cmake/Modules/**'
               - '**/CMakeLists.txt'
             build-qec:
               - '.github/actions/build-lib/action.yaml'
               - '.github/actions/build-lib/build_qec.sh'
+              - '.github/actions/build-lib/setup_custabilizer.sh'
               - '.github/workflows/lib_qec.yaml'
               - 'cmake/Modules/**'
               - 'libs/core/**/*.cpp'