fix

Signed-off-by: Junpu Fan <[email protected]>

Author: junpuf

.github/workflows/reusable-build-container-image.yml

@@ -114,6 +114,9 @@ on:
       HUGGING_FACE_HUB_TOKEN:
         required: false
 
+permissions:
+  contents: read
+
 jobs:
   build-image:
     runs-on: ${{ fromJSON(inputs.runs-on) }}

.github/workflows/reusable-pr-validation.yml

@@ -93,6 +93,10 @@ on:
         description: 'Whether test changes were detected'
         value: ${{ jobs.pr-validation.outputs.test-change }}
 
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   pr-validation:
     runs-on: ${{ fromJSON(inputs.runs-on) }}

.github/workflows/reusable-set-test-environment.yml

@@ -63,6 +63,9 @@ on:
       HUGGING_FACE_HUB_TOKEN:
         required: false
 
+permissions:
+  contents: read
+
 jobs:
   set-environment:
     if: |

.github/workflows/reusable-test-execution.yml

@@ -171,6 +171,9 @@ on:
       HUGGING_FACE_HUB_TOKEN:
         required: false
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ${{ fromJSON(inputs.runs-on) }}