ci: add minimum GitHub token permissions for workflows

[ashishkurmi]

Description

This PR adds minimum token permissions for the GITHUB_TOKEN in GitHub Actions workflows using https://github.com/step-security/secure-workflows.

GitHub Actions workflows have a GITHUB_TOKEN with write access to multiple scopes.
Here is an example of the permissions in one of the workflows:
https://github.com/hashicorp/packer/runs/8239485051?check_suite_focus=true#step:1:19

After this change, the scopes will be reduced to the minimum needed for the following workflows:

• auto-close-stale-issues.yml
• issues.yml

The following workflow files already have the least privileged token permission set:

• acceptance-test.yml
• backport.yml
• go-test.yml
• issue-comment-created.yml
• issues-opened.yml
• lock.yml
• nightly-release.yml
• build.yml
• check-plugin-docs.yml
• go-validate.yml
• issue-migrator.yml

Motivation and Context

• This is a security best practice, so if the GITHUB_TOKEN is compromised due to a vulnerability or compromised Action, the damage will be reduced.
• GitHub recommends defining minimum GITHUB_TOKEN permissions.
  https://docs.github.com/en/actions/security-guides/automatic-token-authentication#modifying-the-permissions-for-the-github_token
• The Open Source Security Foundation (OpenSSF) Scorecards also treats not setting token permissions as a high-risk issue. This change will help increase the Scorecard score for this repository.

Signed-off-by: Ashish Kurmi [email protected]

[hashicorp-cla]

All committers have signed the CLA.

[nywilken]

Thank you for the contribution. I'm going to remove the file .github/workflows/issues.yml as it is no longer used but this is otherwise good to go.

[github-actions]

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.