Add permissions to workflows

.github/workflows/build-rpm-arm64.yml

@@ -5,6 +5,9 @@ on:
     types: [published]
   workflow_dispatch:
 
+permissions:
+  contents: write
+
 jobs:
   ci:
     name: "${{ matrix.target }}"

.github/workflows/build-rpm-armhf.yml

@@ -5,6 +5,9 @@ on:
     types: [published]
   workflow_dispatch:
 
+permissions:
+  contents: write
+
 jobs:
   ci:
     name: "${{ matrix.target }}"

.github/workflows/build-rpm-x86-64.yml

@@ -5,6 +5,9 @@ on:
     types: [published]
   workflow_dispatch:
 
+permissions:
+  contents: write
+
 jobs:
   ci:
     name: "${{ matrix.target }}"

.github/workflows/build-watcom.yml

@@ -5,6 +5,9 @@ on:
     types: [published]
   workflow_dispatch:
 
+permissions:
+  contents: write
+
 jobs:
   ci:
     name: "${{ matrix.target }}"

.github/workflows/build-win32.yml

@@ -5,6 +5,9 @@ on:
     types: [published]
   workflow_dispatch:
 
+permissions:
+  contents: write
+
 jobs:
   ci:
     name: "${{ matrix.target }}"

.github/workflows/build-win64.yml

@@ -5,6 +5,9 @@ on:
     types: [published]
   workflow_dispatch:
 
+permissions:
+  contents: write
+
 jobs:
   ci:
     name: "${{ matrix.target }}"

.github/workflows/build-winarm64.yml

@@ -5,6 +5,9 @@ on:
     types: [published]
   workflow_dispatch:
 
+permissions:
+  contents: write
+
 jobs:
   ci:
     name: "${{ matrix.target }}"

.github/workflows/c-cpp-Linux.yml

@@ -2,10 +2,14 @@ name: C/C++ CI Linux
 
 on:
   push:
-    branches: [ "master" ]
     paths: [ '**.c', '**.h', 'Makefile.Linux', '.github/configs', '.github/workflows/c-cpp-Linux.yml' ]
+  pull_request:
+    paths: [ "**.c", "**.h", "Makefile.Linux", ".github/configs", ".github/workflows/c-cpp-Linux.yml" ]
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   ci:
     name: "${{ matrix.target }}"

.github/workflows/c-cpp-MacOS.yml

@@ -2,10 +2,14 @@ name: C/C++ CI MacOS
 
 on:
   push:
-    branches: [ "master" ]
     paths: [ '**.c', '**.h', 'Makefile.FreeBSD', '.github/configs', '.github/workflows/c-cpp-MacOS.yml' ]
+  pull_request:
+    paths: [ "**.c", "**.h", "Makefile.FreeBSD", ".github/configs", ".github/workflows/c-cpp-MacOS.yml" ]
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   ci:
     name: "${{ matrix.target }}"

.github/workflows/c-cpp-Windows.yml

@@ -2,10 +2,14 @@ name: C/C++ CI Windows
 
 on:
   push:
-    branches: [ "master" ]
     paths: [ '**.c', '**.h', 'Makefile.msvc', '.github/configs', '.github/workflows/c-cpp-Windows.yml' ]
+  pull_request:
+    paths: [ "**.c", "**.h", "Makefile.msvc", ".github/configs", ".github/workflows/c-cpp-Windows.yml" ]
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   ci:
     name: "${{ matrix.target }}"

.github/workflows/c-cpp-cmake.yml

@@ -2,10 +2,14 @@ name: C/C++ CI cmake
 
 on:
   push:
-    branches: [ "master", "unix_socket" ]
     paths: [ '**.c', '**.h', '**.cmake', 'CMakeLists.txt', '.github/configs', '.github/workflows/c-cpp-cmake.yml' ]
+  pull_request:
+    paths: [ "**.c", "**.h", "**.cmake", "CMakeLists.txt", ".github/configs", ".github/workflows/c-cpp-cmake.yml" ]
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   ci:
     name: "${{ matrix.target }}"

.github/workflows/docker-ghcr.yml

@@ -5,6 +5,10 @@ on:
     types: [published]
   workflow_dispatch:
 
+permissions:
+  contents: read
+  packages: write
+
 env:
   REGISTRY: ghcr.io
   IMAGE_NAME: ${{ github.repository }}
@@ -13,9 +17,6 @@ jobs:
   build:
     name: Build and push Docker images
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
     steps:
       - name: Checkout
         uses: actions/checkout@v5

.github/workflows/docker.yml

@@ -5,6 +5,9 @@ on:
     types: [published]
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 env:
   REGISTRY: docker.io
   IMAGE_NAME: 3proxy/3proxy
@@ -13,8 +16,6 @@ jobs:
   build:
     name: Build and push Docker images
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
     steps:
       - name: Checkout
         uses: actions/checkout@v5