chore: explicitly set permissions (#6316)

.github/workflows/build.yml

@@ -1,6 +1,9 @@
 name: Build
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest

.github/workflows/clang-format-lint.yml

@@ -3,6 +3,9 @@ on:
   push: {}
   pull_request: {}
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest

.github/workflows/infer.yml

@@ -8,6 +8,9 @@ name: Infer
       - master
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   run_infer:
     runs-on: ubuntu-latest

.github/workflows/project_structure.yml

@@ -8,6 +8,9 @@ name: ProjectStructure
       - master
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   check_structure:
     runs-on: ubuntu-latest

.github/workflows/stale.yml

@@ -2,8 +2,13 @@ name: 'Close stale issues and PRs'
 on:
   schedule:
     - cron: '0 0 * * *'
+permissions:
+  contents: read
 jobs:
   stale:
+    permissions:
+      issues: write
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/stale@v9