chore(workflows): drop root permissions read-all

.envrc

@@ -0,0 +1 @@
+use asdf

.github/workflows/composer-install.yml

@@ -8,8 +8,6 @@ on:
       - "composer.json"
       - "composer.lock"
 
-permissions: read-all
-
 jobs:
   ComposerInstall:
     runs-on: ubuntu-latest

.github/workflows/compress-images.yml

@@ -8,8 +8,6 @@ on:
   schedule:
     - cron: "00 23 * * 0"
 
-permissions: read-all
-
 jobs:
   CompressOnDemandOrSchedule:
     name: calibreapp/image-actions

.github/workflows/dependency-review.yml

@@ -12,8 +12,6 @@ name: "Dependency Review"
 
 on: [pull_request]
 
-permissions: read-all
-
 jobs:
   dependency-review:
     runs-on: ubuntu-latest

.github/workflows/laravel-phpunit.yml

@@ -7,8 +7,6 @@ on:
   pull_request:
     branches: [main]
 
-permissions: read-all
-
 jobs:
   laravel-tests:
     runs-on: ubuntu-latest

.github/workflows/pr-compress-images.yml

@@ -11,8 +11,6 @@ on:
       - "**.png"
       - "**.webp"
 
-permissions: read-all
-
 jobs:
   CompressInPR:
     # Only run on Pull Requests within the same repository, and not from forks.

.github/workflows/pr-lint.yml

@@ -24,8 +24,6 @@ on:
   pull_request:
     branches: [master, main]
 
-permissions: read-all
-
 ###############
 # Set the Job #
 ###############
@@ -62,14 +60,20 @@ jobs:
       # Run Linter against code base #
       ################################
       - name: Lint Code Base
-        uses: github/super-linter@v7
+        uses: super-linter/super-linter/slim@v7
         env:
           VALIDATE_ALL_CODEBASE: false
+          LINTER_RULES_PATH: "${DEFAULT_WORKSPACE}"
           FIX_ANSIBLE: true
           FIX_ENV: true
           FIX_JSON: true
           FIX_JSONC_PRETTIER: true
           FIX_MARKDOWN: true
+          FIX_SHELL_SHFMT: true
+          FIX_TERRAFORM_FMT: true
+          FIX_TYPESCRIPT_PRETTIER: true
+          FIX_VUE_PRETTIER: true
+          FIX_YAML_PRETTIER: true
           # Change to 'master' if your main branch differs
           DEFAULT_BRANCH: ${{ env.MAIN_BRANCH }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release-drafter.yml

@@ -4,8 +4,6 @@ name: Release Drafter
 on:
   workflow_call:
 
-permissions: read-all
-
 jobs:
   update_release_draft:
     name: ✏️ Draft release

.github/workflows/release-monthly.yaml

@@ -7,8 +7,6 @@ on:
   schedule:
     - cron: "0 0 1 * *" # 1st of every month at midnight
 
-permissions: read-all
-
 jobs:
   release:
     name: Release

.github/workflows/reviewdog-linters.yml

@@ -3,8 +3,6 @@ name: Reviewdog Linters
 
 on: [pull_request]
 
-permissions: read-all
-
 jobs:
   linters:
     name: Linters

.github/workflows/stale.yml

@@ -7,8 +7,6 @@ on:
   workflow_call:
   workflow_dispatch:
 
-permissions: read-all
-
 jobs:
   stale:
     name: 🧹 Clean up stale issues and PRs

.github/workflows/sync-labels-to-own-projects.yml

@@ -12,8 +12,6 @@ on:
   schedule:
     - cron: "0 0 * * *" # Every day at midnight
 
-permissions: read-all
-
 jobs:
   sync-labels:
     runs-on: ubuntu-latest

.github/workflows/sync-labels.yml

@@ -13,8 +13,6 @@ on:
   workflow_call:
   workflow_dispatch:
 
-permissions: read-all
-
 jobs:
   labels:
     name: ♻️ Sync labels