fix(ci): permissions, again

.github/workflows/pr-lint.yml

@@ -9,6 +9,11 @@ on:
   pull_request:
     branches: [master, main]
 
+permissions:
+  contents: read
+  packages: read
+  statuses: write
+
 jobs:
   SuperLinter:
     uses: ivuorinen/.github/.github/workflows/pr-lint.yml@main

.github/workflows/release-drafter.yml

@@ -5,6 +5,11 @@ name: Release Drafter
 on:
   workflow_call:
 
+permissions:
+  contents: write
+  statuses: write
+  packages: read
+
 jobs:
   Draft:
     uses: ivuorinen/.github/.github/workflows/sync-labels.yml@main

.github/workflows/stale.yml

@@ -8,6 +8,10 @@ on:
   workflow_call:
   workflow_dispatch:
 
+permissions:
+  packages: read
+  statuses: read
+
 jobs:
   stale:
     uses: ivuorinen/.github/.github/workflows/stale.yml@main

.github/workflows/sync-labels.yml

@@ -14,6 +14,11 @@ on:
   workflow_call:
   workflow_dispatch:
 
+permissions:
+  issues: write
+  contents: read
+  statuses: read
+
 jobs:
   SyncLabels:
     uses: ivuorinen/.github/.github/workflows/sync-labels.yml@main