Add additional permissions (#5217)

* Add additional permissions

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

* Fix yamllint warning

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

.github/workflows/go.fmt.yml

@@ -4,9 +4,13 @@ on:
   schedule:
     - cron: '22 10 * * 1'
 
+permissions: read-all
+
 jobs:
   fix:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Checkout
         uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579

.github/workflows/go.tidy.yml

@@ -4,9 +4,13 @@ on:
   schedule:
     - cron: '22 10 * * 3'
 
+permissions: read-all
+
 jobs:
   fix:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Install Go
         uses: actions/setup-go@bfdd3570ce990073878bf10f6b2d79082de49492

.github/workflows/make.doc.yml

@@ -4,9 +4,13 @@ on:
   schedule:
     - cron: '22 10 * * 0'
 
+permissions: read-all
+
 jobs:
   fix:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Checkout
         uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579

.github/workflows/reviewdog.yml

@@ -5,6 +5,8 @@ on:
     branches:
       - master
 
+permissions: read-all
+
 jobs:
   gofmt:
     name: Go Fmt

.github/workflows/whitespace.yml

@@ -4,9 +4,13 @@ on:
   schedule:
     - cron: '22 10 * * 2'
 
+permissions: read-all
+
 jobs:
   fix:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Checkout
         uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579

.github/workflows/yamllint.yml

@@ -1,6 +1,7 @@
 name: 'Yamllint GitHub Actions'
 on:
   - pull_request
+permissions: read-all
 jobs:
   yamllint:
     name: 'Yamllint'