Revert "chore(actions): address zizmor findings"

This reverts commit c8028e1.

Author: amanda-tarafa

.github/workflows/bigtable-conformance.yml

@@ -14,9 +14,6 @@
 # Github action job to test core java library features on
 # downstream client libraries before they are released.
 on:
-
-permissions:
-  contents: read
   push:
     branches:
     - main

.github/workflows/build-pr.yml

@@ -1,8 +1,5 @@
 name: Build and test PR (changed APIs only)
 
-permissions:
-  contents: read
-
 on: [pull_request]
 
 jobs:
@@ -16,14 +13,13 @@ jobs:
         regex: ["'Google\\.Cloud\\.[A-L].*'", "'Google\\.Cloud\\.[M-Z].*'", "'!Google\\.Cloud'"]
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+    - uses: actions/checkout@v7
       with:
         submodules: true
         fetch-depth: 100
-        persist-credentials: false
 
     - name: Setup .NET
-      uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5
+      uses: actions/setup-dotnet@v5
       with:
         dotnet-version: |
           6.0.x

.github/workflows/build-push.yml

@@ -1,8 +1,5 @@
 name: Build push
 
-permissions:
-  contents: read
-
 on:
   push:
     branches:
@@ -16,13 +13,12 @@ jobs:
       DOTNET_NOLOGO: true
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+    - uses: actions/checkout@v7
       with:
         submodules: true
-        persist-credentials: false
 
     - name: Setup .NET
-      uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5
+      uses: actions/setup-dotnet@v5
       with:
         dotnet-version: |
           6.0.x

.github/workflows/build-tools.yml

@@ -1,8 +1,5 @@
 name: Build and test PR (tools)
 
-permissions:
-  contents: read
-
 on: [pull_request]
 
 jobs:
@@ -13,13 +10,12 @@ jobs:
       DOTNET_NOLOGO: true
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+    - uses: actions/checkout@v7
       with:
         submodules: true
-        persist-credentials: false
 
     - name: Setup .NET
-      uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5
+      uses: actions/setup-dotnet@v5
       with:
         dotnet-version: |
           8.0.x

.github/workflows/check-api-catalog.yml

@@ -1,8 +1,5 @@
 name: Check that apis.json is valid JSON
 
-permissions:
-  contents: read
-
 on: [pull_request, push]
 
 jobs:
@@ -11,9 +8,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
-      with:
-        persist-credentials: false
+    - uses: actions/checkout@v7
 
     - name: Validate API catalog
       run: python -c 'import json; json.load(open("generator-input/apis.json", "r"))'

.github/workflows/check-script-permissions.yml

@@ -1,8 +1,5 @@
 name: Check that all pre and post-generation scripts are executable
 
-permissions:
-  contents: read
-
 on: [pull_request, push]
 
 jobs:
@@ -11,9 +8,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
-      with:
-        persist-credentials: false
+    - uses: actions/checkout@v7
 
     - name: Validate script permissions
       run: '! stat -c "%a %n" generator-input/tweaks/*/p*.sh | grep -v 755'

.github/workflows/diff-pr.yml

@@ -14,11 +14,10 @@ jobs:
       pull-requests: write
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+    - uses: actions/checkout@v7
       with:
         submodules: true
         fetch-depth: 100
-        persist-credentials: false
 
     # The GitHub checkout action leaves the repo in a slightly awkward
     # state. This tidies it up.
@@ -29,7 +28,7 @@ jobs:
         git checkout pr-head
 
     - name: Setup .NET
-      uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5
+      uses: actions/setup-dotnet@v5
       with:
         dotnet-version: |
           6.0.x

.github/workflows/spanner-emulator-pr-push.yml

@@ -1,8 +1,5 @@
 name: Spanner tests against emulator (Spanner changes only)
 
-permissions:
-  contents: read
-
 on:
   pull_request:
     paths:
@@ -26,13 +23,12 @@ jobs:
           - 9020:9020
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+    - uses: actions/checkout@v7
       with:
         submodules: true
-        persist-credentials: false
 
     - name: Setup .NET
-      uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5
+      uses: actions/setup-dotnet@v5
       with:
         dotnet-version: |
           6.0.x

.github/workflows/storage-retry-conformance.yml

@@ -1,8 +1,5 @@
 name: Run Storage Retry conformance tests against service emulator
 
-permissions:
-  contents: read
-
 on:
   push:
     branches: [ main ]
@@ -22,18 +19,17 @@ jobs:
 
     services:
       emulator:
-        image: gcr.io/cloud-devrel-public-resources/storage-testbench:latest # zizmor: ignore[unpinned-images]
+        image: gcr.io/cloud-devrel-public-resources/storage-testbench:latest
         ports:
           - 9000:9000
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+    - uses: actions/checkout@v7
       with:
         submodules: true
-        persist-credentials: false
 
     - name: Setup .NET
-      uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5
+      uses: actions/setup-dotnet@v5
       with:
         dotnet-version: |
           6.0.x