Securing permissions - AppSec Pod #959

[andrewalson]

• Reduced permissions for statuses, checks, security-events, and deployments to read/write where necessary (small reduction of attack).
• Restricted permissions for contents, packages, and actions to lower risk (large reduction of attack).
• Improved overall security posture by minimizing potential access to sensitive operations.

Implemented all suggestions for maximum reduction of attack. Alongside additions, changes to the existing permissions block include actions to none from read, while values for contents and security-events are unchanged.

Previous permissions block:

permissions:
  actions: read
  contents: read
  security-events: write

[github-actions]

[github-actions]

Hello there, thanks for opening your first Pull Request. Someone will review it soon.