Add explicit workflow token permissions

.github/workflows/a11y.yaml

@@ -3,6 +3,9 @@ name: OpenACR output accessibility testing
 on:
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   build-test:
     name: Building app, generate output examples and test for accessibility issues

.github/workflows/backlog-issues.yaml

@@ -6,6 +6,11 @@ on:
       - reopened
       - opened
 
+permissions:
+  contents: read
+  issues: write
+  repository-projects: write
+
 jobs:
   triage_issues:
     if: github.repository == 'GSA/openacr'

.github/workflows/main.yml

@@ -9,6 +9,9 @@ on:
   release:
     types: [created]
 
+permissions:
+  contents: write
+
 jobs:
   build:
     runs-on: ubuntu-latest

.github/workflows/openacr-export.yaml

@@ -3,6 +3,9 @@ name: OpenACR Export
 on:
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   build-test:
     name: Building app and generate export of all reports including the data table.

.github/workflows/pre-commit.yaml

@@ -3,6 +3,9 @@ name: pre-commit
 on:
   pull_request:
 
+permissions:
+  contents: write
+
 jobs:
   pre-commit:
     runs-on: ubuntu-latest

.github/workflows/tests.yaml

@@ -3,6 +3,9 @@ name: tests
 on:
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   build-test:
     name: Building app and run our tests