fix: add permissions to actions

.github/workflows/alpha-release.yml

@@ -3,6 +3,9 @@ name: Alpha Release
 on:
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   alpha-release:
     runs-on: ubuntu-latest
@@ -54,4 +57,4 @@ jobs:
       - name: Push Changes and Tags
         run: |
           git push --follow-tags
-        shell: bash 
+        shell: bash

.github/workflows/changesets.yml

@@ -1,4 +1,9 @@
-name: Release
+name: Changesets
+
+permissions:
+  contents: read
+  pull-requests: write
+
 on:
   push:
     branches: [main]
@@ -21,7 +26,7 @@ jobs:
       - name: Checkout Repo
         uses: actions/checkout@v4
 
-      - name:
+      - name: Setup Environment
         uses: ./.github/actions/setup
 
       - name: Create Release Pull Request or Publish to NPM

.github/workflows/e2e.yml

@@ -1,5 +1,8 @@
 name: E2E Tests
 
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
   workflow_call:

.github/workflows/expo-preview.yml

@@ -1,4 +1,8 @@
-name: expo-preview
+name: Expo Preview
+
+permissions:
+  contents: read
+
 on:
   workflow_call:
   workflow_dispatch:

.github/workflows/expo-update.yml

@@ -1,4 +1,8 @@
-name: expo-update
+name: Expo Update
+
+permissions:
+  contents: read
+
 on:
   workflow_call:
   workflow_dispatch:

.github/workflows/pull-request.yml

@@ -1,4 +1,8 @@
 name: Pull Request
+
+permissions:
+  contents: read
+
 on:
   pull_request:
     types: [opened, reopened, synchronize, ready_for_review]

.github/workflows/snapshot.yml

@@ -1,4 +1,8 @@
 name: Snapshot
+
+permissions:
+  contents: read
+
 on:
   workflow_call:
   workflow_dispatch:

.github/workflows/verify.yml

@@ -1,4 +1,8 @@
 name: Verify
+
+permissions:
+  contents: read
+
 on:
   workflow_call:
   workflow_dispatch:

.prettierignore

@@ -1,2 +1,3 @@
 /apps
-.yarn
+.yarn
+.github/actions