Merge pull request #50 from intel/jwintel-security-patch-1

Add missing workflow permissions

Author: jwintel

.github/workflows/backend-ci.yml

@@ -16,6 +16,9 @@
 
 name: gProfiler Backend CI
 
+permissions:
+  contents: read
+
 on:
   push:
     branches:

.github/workflows/codeql.yml

@@ -11,11 +11,15 @@
 #
 name: "CodeQL Advanced"
 
+permissions: 
+  security-events: write
+  
 on:
-  push:
-    branches: [ "master" ]
   pull_request:
-    branches: [ "master" ]
+  push:
+    tags:
+      - '**'
+      
   schedule:
     - cron: '05 19 * * 2'
 

.github/workflows/frontend-ci.yml

@@ -16,6 +16,9 @@
 
 name: gProfiler Frontend CI
 
+permissions:
+  contents: read
+
 on:
   push:
     branches: