chore: fixed Token-Permissions for Actions (#3517)

Signed-off-by: Gaius <gaius.qi@gmail.com>

.github/workflows/check-size.yml

@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [main, release-*]
 
+permissions:  
+  contents: read
+
 env:
   GO_VERSION: '1.21'
 

.github/workflows/codeql-analysis.yml

@@ -10,11 +10,17 @@ on:
   schedule:
     - cron: '0 4 * * *'
 
+permissions:  
+  contents: read
+
 jobs:
   analyze:
     name: Analyze
     runs-on: ubuntu-latest
 
+    permissions:
+      security-events: write
+
     strategy:
       fail-fast: false
       matrix:

.github/workflows/compatibility-e2e-v1.yml

@@ -10,6 +10,9 @@ on:
   schedule:
     - cron: '0 4 * * *'
 
+permissions:  
+  contents: read
+
 env:
   KIND_VERSION: v0.12.0
   CONTAINERD_VERSION: v1.5.2

.github/workflows/compatibility-e2e-v2.yml

@@ -10,6 +10,9 @@ on:
   schedule:
     - cron: '0 4 * * *'
 
+permissions:  
+  contents: read
+
 env:
   KIND_VERSION: v0.12.0
   CONTAINERD_VERSION: v1.5.2

.github/workflows/cr.yml

@@ -1,24 +0,0 @@
-name: Code Review
-
-permissions:
-  contents: read
-  pull-requests: write
-
-on:
-  pull_request:
-    types: [opened, reopened, synchronize]
-    branches:
-      - 'code-review'
-
-jobs:
-  chatgpt_code_review:
-    runs-on: ubuntu-latest
-    steps:
-      - name: ChatGPT Code Review
-        uses: anc95/ChatGPT-CodeReview@main
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
-          LANGUAGE: English
-          top_p: 1
-          temperature: 1

.github/workflows/e2e-v1.yml

@@ -10,6 +10,9 @@ on:
   schedule:
     - cron: '0 4 * * *'
 
+permissions:  
+  contents: read
+
 env:
   KIND_VERSION: v0.12.0
   CONTAINERD_VERSION: v1.5.2

.github/workflows/e2e-v2-nydus.yml

@@ -10,6 +10,9 @@ on:
   schedule:
     - cron: '0 4 * * *'
 
+permissions:  
+  contents: read
+
 env:
   GO_VERSION: '1.21'
   KIND_VERSION: v0.12.0

.github/workflows/e2e-v2.yml

@@ -10,6 +10,9 @@ on:
   schedule:
     - cron: '0 4 * * *'
 
+permissions:  
+  contents: read
+
 env:
   KIND_VERSION: v0.12.0
   CONTAINERD_VERSION: v1.5.2