fix: Workflow does not contain permissions (#93)

Author: mato533

.github/workflows/auto-close.yml

@@ -5,6 +5,9 @@ on:
   schedule:
     - cron: '0 0 * * *'
 
+permissions:
+  contents: read
+
 jobs:
   close-not-reproducible-issues:
     runs-on: ubuntu-latest

.github/workflows/ci-build.yml

@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 name: Build
 
 on:

.github/workflows/ci-e2e.yml

@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 name: E2E tests
 
 on:

.github/workflows/ci-lint.yml

@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 name: Static code analysis
 
 on:

.github/workflows/ci-smoke.yml

@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 name: Smoke tests
 
 on:

.github/workflows/ci-typecheck.yml

@@ -5,6 +5,9 @@ on:
     # Make this a reusable workflow, no value needed
     # https://docs.github.com/en/actions/using-workflows/reusing-workflows
 
+permissions:
+  contents: read
+
 env:
   TURBO_TELEMETRY_DISABLED: 1
 

.github/workflows/ci-unit.yml

@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 name: Unit tests
 
 on:

.github/workflows/ci.yml

@@ -14,6 +14,7 @@ concurrency:
   cancel-in-progress: true
 
 permissions:
+  contents: read
   pull-requests: write
 
 jobs:

e2e/helpers/index.ts

@@ -124,5 +124,5 @@ export async function collapseAllTests(testingSection: DefaultTreeSection) {
 }
 
 export function resetFileChange(filePath: string) {
-    shell.exec(`git checkout ${filePath}`, { silent: true })
+    shell.cmd('git', 'checkout', filePath)
 }