Fix

Signed-off-by: ZePan110 <ze.pan@intel.com>

Author: ZePan110

.github/workflows/_build_comps_base_image.yml

@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 name: Build Comps Base Image
-permissions: read-all
+
 on:
   workflow_call:
     inputs:

.github/workflows/_example-workflow.yml

@@ -2,7 +2,22 @@
 # SPDX-License-Identifier: Apache-2.0
 
 name: Example jobs
-permissions: read-all
+permissions:
+  contents: read
+  id-token: write
+  actions: read
+  attestations: read
+  checks: read
+  deployments: read
+  discussions: read
+  issues: read
+  models: read
+  packages: read
+  pages: read
+  pull-requests: read
+  repository-projects: read
+  statuses: read
+  security-events: read
 on:
   workflow_call:
     inputs:

.github/workflows/weekly-example-test.yml

@@ -3,7 +3,9 @@
 
 name: Weekly test all examples on multiple HWs
 
-permissions: read-all
+permissions:
+  contents: read
+  id-token: write
 
 on:
   schedule:
@@ -33,6 +35,10 @@ jobs:
 
   build-comps-base:
     needs: [get-test-matrix]
+    permissions:
+      attestations: read
+      models: read
+      security-events: read
     strategy:
       matrix:
         node: ${{ fromJson(needs.get-test-matrix.outputs.nodes) }}