chore(gh): update workflows (#265)

- Sets the default permissions for workflows.
- Renames and updates the lock workflow to include discussions scope.
- Updates `.gitignore`.

Signed-off-by: Ryan Johnson <ryan.johnson@broadcom.com>

Author: tenthirtyam

.github/workflows/docs.yml

@@ -4,6 +4,9 @@ name: Publish Documentation
 on:
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   publish-docs:
     runs-on: ubuntu-latest

.github/workflows/issues.yml

@@ -6,6 +6,9 @@ on:
     types:
     - opened
 
+permissions:
+  contents: read
+
 jobs:
   label-issues:
     runs-on: ubuntu-latest

.github/workflows/lock-threads.yml .github/workflows/lock.yml.github/workflows/lock-threads.yml renamed to .github/workflows/lock.yml

@@ -1,21 +1,25 @@
 ---
-name: Lock Threads
+name: Lock
 
 on:
   schedule:
     - cron: 30 00 * * *
 
+permissions:
+  contents: read
+
 jobs:
   lock:
     runs-on: ubuntu-latest
     permissions:
       issues: write
       pull-requests: write
+      discussions: write
     steps:
       - uses: dessant/lock-threads@1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771 # v5.0.1
         with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          issue-comment: >
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+          issue-comment: >-
             I'm going to lock this issue because it has been closed for 30
             days. This helps our maintainers find and focus on the active
             issues.
@@ -24,8 +28,8 @@ jobs:
             If you have found a problem that seems similar to this,
             please open a new issue and complete the issue template so we can
             capture all the details necessary to investigate further.
-          issue-inactive-days: 30
-          pr-comment: >
+          issue-inactive-days: "30"
+          pr-comment: >-
             I'm going to lock this pull request because it has been closed for
             30 days. This helps our maintainers find and focus on the active
             issues.
@@ -34,4 +38,4 @@ jobs:
             If you have found a problem that seems related to this
             change, please open a new issue and complete the issue template so
             we can capture all the details necessary to investigate further.
-          pr-inactive-days: 30
+          pr-inactive-days: "30"

.github/workflows/pull-requests.yml

@@ -12,6 +12,9 @@ on:
       - edited
       - ready_for_review
 
+permissions:
+  contents: read
+
 jobs:
   labeler:
     name: Labeler

.github/workflows/stale.yml

@@ -5,6 +5,9 @@ on:
   schedule:
     - cron: 00 00 * * *
 
+permissions:
+  contents: read
+
 jobs:
   stale:
     runs-on: ubuntu-latest

.github/workflows/tests.yml

@@ -9,6 +9,9 @@ on:
       - "**.psd1"
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   basic_tests:
     runs-on: ubuntu-latest

.gitignore

@@ -1,7 +1,12 @@
-# MacOS
-## Ignore desktop services files.
+# Ignore editor directories.
+.idea/
+.vscode/
+
+# Ignore temporary editor files.
+*~
+
+# Ignore macOS desktop services store files.
 **/.DS_Store
 
-# MkDocs
-## Ignore site directory.
+## Ignore MkDocs site directory.
 **/.site/**