id token by default in test/perf

Author: dsyme

workflows/daily-perf-improver.md

@@ -8,7 +8,20 @@ on:
 
 timeout_minutes: 60
 
-permissions: read-all
+permissions:
+  actions: read
+  attestations: read
+  checks: read
+  contents: read
+  deployments: read
+  id-token: write  # for auth in some actions
+  issues: read
+  discussions: read
+  packages: read
+  pages: read
+  pull-requests: read
+  security-events: read
+  statuses: read
 
 network: defaults
 

workflows/daily-test-improver.md

@@ -8,7 +8,20 @@ on:
 
 timeout_minutes: 30
 
-permissions: read-all
+permissions:
+  actions: read
+  attestations: read
+  checks: read
+  contents: read
+  deployments: read
+  id-token: write  # for auth in some actions
+  issues: read
+  discussions: read
+  packages: read
+  pages: read
+  pull-requests: read
+  security-events: read
+  statuses: read
 
 network: defaults