ci: restrict workflow permissions #55

Job	Run time
ci / conditionals	1s
ci / build / context	5s
ci / compliance / dependency review	7s
ci / compliance / ossf-scorecard	21s
ci / compliance / check-commit-message	2s
ci / docs / docs	12s
ci / sast / bandit	39s
ci / sast / black	0s
ci / sast / checkov	0s
ci / sast / codeql	0s
ci / sast / hadolint	0s
ci / sast / kubelinter	0s
ci / sast / pylint	32s
ci / sast / semgrep	0s
ci / unit-test / unit tests	0s
ci / sast / trivy config	0s
ci / build / build	1m 18s
ci / integration-test / k8s versions (v1.25)	1m 29s
ci / integration-test / optional k8s versions	0s
ci / integration-test / functional (basic)	1m 14s
ci / integration-test / k8s versions (v1.26)	1m 22s
ci / integration-test / optional	0s
ci / integration-test / k8s versions (v1.27)	1m 12s
ci / integration-test / k8s versions (v1.28)	1m 11s
ci / sca / syft / dependency review	0s
ci / sca / trivy image	44s
ci / sca / grype	0s
	10m 29s

Provide feedback