Fix Token Permission issues (#10151)

Co-authored-by: Your Name <Your Email>

.github/workflows/chronos-example-python-spark31.yml

@@ -5,6 +5,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 # Controls when the action will run. 
 on:
   # Triggers the workflow on merge events for nano/orca change

.github/workflows/chronos-howto-guides-python-spark31.yml

@@ -4,7 +4,10 @@ name: Chronos Tests for How-to Guides Spark3.1 py38 py39
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
   cancel-in-progress: true
-
+
+permissions:
+  contents: read
+
 # Controls when the action will run. 
 on:
   # Triggers the workflow on pull request events but only for the main branch

.github/workflows/chronos-nb-python-spark31.yml

@@ -11,6 +11,9 @@ on:
   # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 env:
   GIST_ID: bc8a699b455bced4a1aef138ad5df07e
 

.github/workflows/chronos-notebook-python-spark31.yml

@@ -5,6 +5,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 # Controls when the action will run. 
 on:
   schedule:

.github/workflows/chronos-prvn-python-spark31.yml

@@ -5,6 +5,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 # Controls when the action will run. 
 on:
   # Triggers the workflow on merge events for nano/orca change

.github/workflows/llm-harness-evaluation.yml

@@ -5,6 +5,9 @@ concurrency:
   group: ${{ github.workflow }}-llm-nightly-test-${{ github.event.pull_request.number || github.run_id }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 # Controls when the action will run.
 on:
   schedule:

.github/workflows/nightly-build-example-tests-ppml.yaml

@@ -1,5 +1,8 @@
 name: Nightly Build Example Tests PPML Spark Local on Graphene
 
+permissions:
+  contents: read
+
 on:
   schedule:
     - cron: '0 17 * * *'
@@ -33,8 +36,6 @@ on:
 jobs:
   example-tests-ppml:
     runs-on: [self-hosted, SGX, Wilwarin]
-    permissions:
-      contents: read
 
     steps:
     - uses: actions/checkout@v3

.github/workflows/scala-style-check.yml

@@ -4,7 +4,10 @@ name: Scala Style Check
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
   cancel-in-progress: true
-
+
+permissions:
+  contents: read
+
 on:
   push:
     branches: [ "main" ]
@@ -25,8 +28,6 @@ jobs:
   build:
 
     runs-on: [self-hosted, Gondolin, ubuntu-20.04-lts]
-    permissions:
-      contents: read
 
     steps:
     - uses: actions/checkout@v3