Fix token permission code scanning alert

.github/workflows/benchmark-go-main.yml

@@ -5,6 +5,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   benchmark:
     name: Performance regression check

.github/workflows/benchmark-go-pr.yml

@@ -5,6 +5,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   benchmark:
     name: Performance regression check

.github/workflows/codeql.yml

@@ -19,6 +19,9 @@ on:
   schedule:
     - cron: '15 10 * * 1'
 
+permissions:
+  contents: read
+
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})

.github/workflows/scorecard.yml

@@ -14,6 +14,9 @@ on:
   push:
     branches: [ "main" ]
 
+permissions:
+  contents: read
+
 jobs:
   analysis:
     name: Scorecard analysis

.github/workflows/terragrunt_test.yml

@@ -2,6 +2,9 @@ name: 'Terragrunt format check'
 on:
   - pull_request
 
+permissions:
+  contents: read
+
 env:
   tf_version: '1.5.7'
   tg_version: '0.55.1'