fix(linter)!: fix linter required permissions

Signed-off-by: Emilien Escalle <emilien.escalle@escemi.com>

Author: neilime

.github/workflows/__main-ci.yml

@@ -24,10 +24,11 @@ jobs:
       actions: read
       contents: read
       id-token: write
+      issues: write
       packages: read
       pull-requests: write
-      statuses: write
       security-events: write
+      statuses: write
 
   release:
     needs: ci

.github/workflows/__pull-request-ci.yml

@@ -18,7 +18,8 @@ jobs:
       actions: read
       contents: read
       id-token: write
+      issues: write
       packages: read
       pull-requests: write
-      statuses: write
       security-events: write
+      statuses: write

.github/workflows/__shared-ci.yml

@@ -10,6 +10,9 @@ jobs:
     permissions:
       actions: read
       contents: read
+      issues: write
+      packages: read
+      pull-requests: write
       security-events: write
       statuses: write
     uses: ./.github/workflows/linter.yml

.github/workflows/linter.yml

@@ -76,6 +76,9 @@ jobs:
     runs-on: ${{ fromJson(inputs.runs-on) }}
     permissions:
       contents: read
+      issues: write
+      packages: read
+      pull-requests: write
       statuses: write
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
@@ -246,7 +249,7 @@ jobs:
           VALIDATE_ALL_CODEBASE: ${{ inputs.lint-all }}
           LOG_LEVEL: WARN
           DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
-          GITHUB_TOKEN: ${{ secrets.github-token || github.token }} # zizmor: ignore[secrets-outside-env] reusable workflow token override is intentional
+          GITHUB_TOKEN: ${{ secrets.github-token || secrets.GITHUB_TOKEN || github.token }} # zizmor: ignore[secrets-outside-env] reusable workflow token override is intentional
           IGNORE_GITIGNORED_FILES: "true"
 
   codeql: