Merge pull request #913 from containerd/revert-911-issue910

Revert "ci(all): add read-all permission to all workflows"

Author: jprendes

.github/workflows/action-build.yml

@@ -30,8 +30,6 @@ on:
         type: string
         required: false
 
-permissions: read-all
-
 jobs:
   build-sign-upload:
     permissions:

.github/workflows/action-check.yml

@@ -12,8 +12,6 @@ on:
         required: true
         type: string
 
-permissions: read-all
-
 jobs:
   check:
     name: lint on ${{ inputs.os }}

.github/workflows/action-test-image.yml

@@ -9,8 +9,6 @@ on:
         type: string
         default: img
 
-permissions: read-all
-
 jobs:
   test-image:
     name: build test ${{ inputs.image }}

.github/workflows/action-test-k3s.yml

@@ -12,8 +12,6 @@ on:
         required: true
         type: string
 
-permissions: read-all
-
 jobs:
   e2e-k3s:
     name: e2e k3s test on ${{ inputs.os }}

.github/workflows/action-test-kind.yml

@@ -18,8 +18,6 @@ on:
         type: string
         required: true
 
-permissions: read-all
-
 jobs:
   e2e-kind:
     name: e2e kind test on ${{ inputs.os }} with ${{ inputs.image }}

.github/workflows/action-test-smoke.yml

@@ -12,8 +12,6 @@ on:
         required: true
         type: string
 
-permissions: read-all
-
 jobs:
   smoke-test:
     name: smoke test on ${{ inputs.os }}

.github/workflows/benchmarks.yml

@@ -13,16 +13,16 @@ on:
       - 'NOTICE'
       - 'art/**'
 
-permissions: read-all
+permissions:
+  # deployments permission to deploy GitHub pages website
+  deployments: write
+  # contents permission to update benchmark contents in gh-pages branch
+  contents: write
 
 jobs:
   benchmark:
     runs-on: ubuntu-latest
-    permissions:
-      # deployments permission to deploy GitHub pages website
-      deployments: write
-      # contents permission to update benchmark contents in gh-pages branch
-      contents: write
+
     steps:
       - uses: actions/checkout@v4
       - uses: actions-rust-lang/setup-rust-toolchain@v1
@@ -56,11 +56,7 @@ jobs:
 
   benchmark-mem:
     runs-on: ubuntu-latest
-    permissions:
-      # deployments permission to deploy GitHub pages website
-      deployments: write
-      # contents permission to update benchmark contents in gh-pages branch
-      contents: write
+
     steps:
       - uses: actions/checkout@v4
       - uses: actions-rust-lang/setup-rust-toolchain@v1
@@ -97,11 +93,7 @@ jobs:
 
   benchmark-http:
     runs-on: ubuntu-latest
-    permissions:
-      # deployments permission to deploy GitHub pages website
-      deployments: write
-      # contents permission to update benchmark contents in gh-pages branch
-      contents: write
+
     steps:
       - uses: actions/checkout@v4
       - uses: actions-rust-lang/setup-rust-toolchain@v1
@@ -134,11 +126,7 @@ jobs:
 
   benchmark-stress:
     runs-on: ubuntu-latest
-    permissions:
-      # deployments permission to deploy GitHub pages website
-      deployments: write
-      # contents permission to update benchmark contents in gh-pages branch
-      contents: write
+
     steps:
       - uses: actions/checkout@v4
       - uses: actions-rust-lang/setup-rust-toolchain@v1

.github/workflows/ci.yml

@@ -18,8 +18,6 @@ on:
 env:
   CARGO_TERM_COLOR: always
 
-permissions: read-all
-
 jobs:
   dependency-review:
     runs-on: ubuntu-latest

.github/workflows/docs.yml

@@ -7,8 +7,6 @@ on:
     branches: [main]
   workflow_dispatch:
 
-permissions: read-all
-
 jobs:
   changes:
     runs-on: ubuntu-22.04

.github/workflows/release-wasi-demo-app.yml

@@ -19,8 +19,6 @@ env:
   CARGO_TERM_COLOR: always
   IMAGES: "wasi-demo-app wasi-demo-oci wasi-demo-oci-artifact wasi-demo-http"
 
-permissions: read-all
-
 jobs:
   release-wasi-demo:
     permissions: