Merge pull request #114 from smallstep/panos/workflows

gh: aligned workflow permissions with smallstep/workflows#324

Author: azazeal

.github/workflows/actionci.yml

@@ -16,6 +16,7 @@ jobs:
   actionci:
     permissions:
       contents: read
+      actions: read
       security-events: write
     uses: smallstep/workflows/.github/workflows/actionci.yml@main
     secrets: inherit

.github/workflows/code-scan-cron.yml

@@ -2,13 +2,11 @@ on:
   schedule:
     - cron: '0 0 * * SUN'
 
-permissions:
-  actions: read
-  contents: read
-  security-events: write
-
 jobs:
   code-scan:
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
     uses: smallstep/workflows/.github/workflows/code-scan.yml@main
-    secrets:
-      GITLEAKS_LICENSE_KEY: ${{ secrets.GITLEAKS_LICENSE_KEY }}
+    secrets: inherit

.github/workflows/triage.yml

@@ -15,6 +15,5 @@ jobs:
     permissions:
       contents: read
       issues: write
-      pull-requests: write
     uses: smallstep/workflows/.github/workflows/triage.yml@main
     secrets: inherit