add permissions constraint for more Github Actions.

Signed-off-by: Liu, Wei Zhi <[email protected]>

Author: LewisLiuPub

.github/workflows/dev-ov_2020-3.yml

@@ -8,6 +8,8 @@ on:
   pull_request:
     branches: [ dev-ov.2020.3 ]
 
+permissions: read-all
+
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
   # This workflow contains a single job called "build"

.github/workflows/dev-ov_2021-3.yml

@@ -8,6 +8,9 @@ on:
   pull_request:
     branches: [ dev-ov.2021.3 ]
 
+permissions:
+  contents: read
+
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
   # This workflow contains a single job called "build"