Suggestion of Security Improvement: specify permissions for GitHub Workflows

[diogoteles08]

Hi!

I'm Diogo and have introduced myself on the Welcome discussion, here =)

I'm creating this discussion to suggest reviewing the permissions at the GitHub Workflows of Laravel. I could see that some external workflows are being called without defining their specific permissions (e.g., here or here), and in this case the default permissions are used. It's important to set the workflow permissions according to the least privilege principle, because if any external job is compromised, Laravel could be corrupted as well.

If agreed, I'd be happy to create a PR to update the workflow files to limit and specify the permissions, making the whole repo more secure.

Thanks for the attention!