Merge pull request #765 from Adyen/set-workflow-permissions

Vulnerability fix: set workflow permissions

Author: gcatanese

.github/workflows/label_new_issues.yml

@@ -3,6 +3,9 @@ on:
   issues:
     types: [opened]
 
+permissions:
+  issues: write
+  
 jobs:
   add-label:
     runs-on: ubuntu-latest

.github/workflows/main.yml

@@ -11,6 +11,9 @@ on:
       - develop
   workflow_dispatch: {}
 
+permissions:
+  contents: read  
+
 jobs:
   php-test:
     name: PHP Test

.github/workflows/stale.yml

@@ -3,6 +3,9 @@ on:
   schedule:
     - cron: '30 8 * * *'
 
+permissions:
+  issues: write
+  
 jobs:
   stale:
     runs-on: ubuntu-latest
@@ -24,4 +27,4 @@ jobs:
           days-before-pr-close: 30
           exempt-pr-labels: 'do not stale'
           only-pr-labels: awaiting-changes,blocked,work-in-progress,awaiting-upstream
-          remove-pr-stale-when-updated: true
+          remove-pr-stale-when-updated: true