add now necessary permissions to github action jobs using labels/issues

.github/workflows/audit.yml

@@ -10,6 +10,10 @@ on:
   schedule:
     - cron: "0 0 * * *"
 
+permissions:
+  contents: read
+  issues: write
+
 jobs:
   security_audit:
     runs-on: ubuntu-latest

.github/workflows/on-pr-review-approve.yml

@@ -2,6 +2,10 @@ on:
   pull_request_review:
     types: [submitted]
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   update-labels:
     if: github.event.review.state == 'approved'

.github/workflows/on-pr-review-submit.yml

@@ -2,6 +2,10 @@ on:
   pull_request_review:
     types: [submitted]
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   update-labels:
     if: github.event.review.state == 'changes_requested'

.github/workflows/tag-merged-pr.yml

@@ -4,6 +4,10 @@ on:
       - master
     types: [closed]
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   update-labels:
     if: ${{ github.event.pull_request.merged }}

.github/workflows/tag-new-pr.yml

@@ -4,6 +4,10 @@ on:
       - master
     types: [opened, reopened, review_requested]
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   update-labels:
     runs-on: ubuntu-latest