Fix security concerns

Author: Raina451

.github/workflows/auto-version-and-publish.yml

@@ -26,10 +26,15 @@ on:
         default: false
         type: boolean
 
+permissions:
+  contents: read
+
 jobs:
   # Detect changes
   changes:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     outputs:
       cli: ${{ steps.filter.outputs.cli }}
       sdk: ${{ steps.filter.outputs.sdk }}
@@ -38,7 +43,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: dorny/paths-filter@v3
+      - uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v3.0.1
         id: filter
         with:
           filters: |
@@ -54,6 +59,8 @@ jobs:
   # Build all packages
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     needs: changes
     steps:
       - uses: actions/checkout@v4
@@ -150,6 +157,7 @@ jobs:
   # Summary
   summary:
     runs-on: ubuntu-latest
+    permissions: {}
     needs: [changes, build, publish-sdk, publish-cli]
     if: always()
     steps: