ci: scope down GitHub Token permissions (#176)

* ci: scope down permissions for auto_assign.yml

* ci: scope down permissions for label_pr_on_title.yml

* ci: scope down permissions for on_merged_pr.yml

* ci: scope down permissions for on_opened_pr.yml

Author: AdnaneKhan

.github/workflows/auto_assign.yml

@@ -3,6 +3,9 @@ on:
   pull_request:
     types: [opened, ready_for_review]
 
+permissions:
+  pull-requests: write
+
 jobs:
   add-reviews:
     runs-on: ubuntu-latest

.github/workflows/label_pr_on_title.yml

@@ -6,6 +6,9 @@ on:
     types:
       - completed
 
+permissions:
+  pull-requests: write
+
 jobs:
   get_pr_details:
     # Guardrails to only ever run if PR recording workflow was indeed

.github/workflows/on_merged_pr.yml

@@ -6,6 +6,9 @@ on:
     types:
       - completed
 
+permissions:
+  issues: write
+
 jobs:
   get_pr_details:
     if: github.event.workflow_run.event == 'pull_request' && github.event.workflow_run.conclusion == 'success'

.github/workflows/on_opened_pr.yml

@@ -6,6 +6,9 @@ on:
     types:
       - completed
 
+permissions:
+  pull-requests: write
+
 jobs:
   get_pr_details:
     if: ${{ github.event.workflow_run.conclusion == 'success' }}