Remove all permission by default.

.github/workflows/build.yml

@@ -7,6 +7,8 @@ on:
   push:
     branches: [ develop ]
 
+permissions: {}
+
 # Enrich gradle.properties for CI/CD
 env:
   GRADLE_OPTS: -Dorg.gradle.jvmargs=-Xmx8g -XX:MaxMetaspaceSize=512m -Dfile.encoding=UTF-8 -XX:+HeapDumpOnOutOfMemoryError -XX:+UseG1GC -Dkotlin.daemon.jvm.options=-Xmx4g

.github/workflows/build_enterprise.yml

@@ -7,6 +7,8 @@ on:
   push:
     branches: [ develop ]
 
+permissions: {}
+
 # Enrich gradle.properties for CI/CD
 env:
   GRADLE_OPTS: -Dorg.gradle.jvmargs=-Xmx8g -XX:MaxMetaspaceSize=512m -Dfile.encoding=UTF-8 -XX:+HeapDumpOnOutOfMemoryError -XX:+UseG1GC -Dkotlin.daemon.jvm.options=-Xmx4g

.github/workflows/danger.yml

@@ -2,6 +2,8 @@ name: Danger CI
 
 on: [pull_request, merge_group]
 
+permissions: {}
+
 jobs:
   build:
     runs-on: ubuntu-latest

.github/workflows/fork-pr-notice.yml

@@ -7,6 +7,8 @@ on:
       - opened
       - reopened
 
+permissions: {}
+
 jobs:
   welcome:
     runs-on: ubuntu-latest

.github/workflows/generate_github_pages.yml

@@ -5,6 +5,8 @@ on:
     # At 00:00 on every Tuesday UTC
     - cron: '0 0 * * 2'
 
+permissions: {}
+
 jobs:
   generate-github-pages:
     runs-on: ubuntu-latest

.github/workflows/gradle-wrapper-update.yml

@@ -5,6 +5,8 @@ on:
   schedule:
     - cron: "0 0 * * *"
 
+permissions: {}
+
 jobs:
   update-gradle-wrapper:
     runs-on: ubuntu-latest

.github/workflows/maestro-local.yml

@@ -5,6 +5,8 @@ on:
   workflow_dispatch:
   pull_request:
 
+permissions: {}
+
 # Enrich gradle.properties for CI/CD
 env:
   GRADLE_OPTS: -Dorg.gradle.jvmargs=-Xmx8g -XX:MaxMetaspaceSize=512m -Dfile.encoding=UTF-8 -XX:+HeapDumpOnOutOfMemoryError -XX:+UseG1GC -Dkotlin.daemon.jvm.options=-Xmx4g

.github/workflows/nightly.yml

@@ -6,6 +6,8 @@ on:
     # Every nights at 4
     - cron: "0 4 * * *"
 
+permissions: {}
+
 env:
   GRADLE_OPTS: -Dorg.gradle.jvmargs=-Xmx8g -XX:MaxMetaspaceSize=512m -Dfile.encoding=UTF-8 -XX:+HeapDumpOnOutOfMemoryError -XX:+UseG1GC -Dkotlin.daemon.jvm.options=-Xmx4g
   CI_GRADLE_ARG_PROPERTIES: --stacktrace --no-daemon -Dsonar.gradle.skipCompile=true --no-configuration-cache

.github/workflows/nightlyReports.yml

@@ -6,6 +6,8 @@ on:
     # Every nights at 5
     - cron: "0 5 * * *"
 
+permissions: {}
+
 # Enrich gradle.properties for CI/CD
 env:
   GRADLE_OPTS: -Dorg.gradle.jvmargs=-Xmx8g -XX:MaxMetaspaceSize=512m -Dfile.encoding=UTF-8 -XX:+HeapDumpOnOutOfMemoryError -XX:+UseG1GC -Dkotlin.daemon.jvm.options=-Xmx4g

.github/workflows/post-release.yml

@@ -5,6 +5,8 @@ on:
     tags:
       - 'v*'
 
+permissions: {}
+
 jobs:
   post-release:
     runs-on: ubuntu-latest

.github/workflows/pull_request.yml

@@ -7,6 +7,8 @@ on:
       ELEMENT_BOT_TOKEN:
         required: true
 
+permissions: {}
+
 jobs:
   prevent-blocked:
     name: Prevent blocked

.github/workflows/quality.yml

@@ -7,6 +7,8 @@ on:
   push:
     branches: [ main, develop ]
 
+permissions: {}
+
 # Enrich gradle.properties for CI/CD
 env:
   GRADLE_OPTS: -Dorg.gradle.jvmargs=-Xmx8g -XX:MaxMetaspaceSize=512m -Dfile.encoding=UTF-8 -XX:+HeapDumpOnOutOfMemoryError -XX:+UseG1GC -Dkotlin.daemon.jvm.options=-Xmx4g

.github/workflows/recordScreenshots.yml

@@ -5,6 +5,8 @@ on:
   pull_request:
     types: [ labeled ]
 
+permissions: {}
+
 # Enrich gradle.properties for CI/CD
 env:
   GRADLE_OPTS: -Dorg.gradle.jvmargs=-Xmx8g -XX:MaxMetaspaceSize=512m -Dfile.encoding=UTF-8 -XX:+HeapDumpOnOutOfMemoryError -XX:+UseG1GC -Dkotlin.daemon.jvm.options=-Xmx4g -Dsonar.gradle.skipCompile=true

.github/workflows/release.yml

@@ -5,6 +5,8 @@ on:
   push:
     branches: [ main ]
 
+permissions: {}
+
 # Enrich gradle.properties for CI/CD
 env:
   GRADLE_OPTS: -Dorg.gradle.jvmargs=-Xmx8g -XX:MaxMetaspaceSize=512m -Dfile.encoding=UTF-8 -XX:+HeapDumpOnOutOfMemoryError -XX:+UseG1GC -Dkotlin.daemon.jvm.options=-Xmx4g

.github/workflows/sonar.yml

@@ -7,6 +7,8 @@ on:
   push:
     branches: [ main, develop ]
 
+permissions: {}
+
 # Enrich gradle.properties for CI/CD
 env:
   GRADLE_OPTS: -Dorg.gradle.jvmargs=-Xmx8g -XX:MaxMetaspaceSize=512m -Dfile.encoding=UTF-8 -XX:+HeapDumpOnOutOfMemoryError -XX:+UseG1GC -Dkotlin.daemon.jvm.options=-Xmx4g

.github/workflows/stale-issues.yml

@@ -4,6 +4,8 @@ on:
   schedule:
     - cron: "30 1 * * *"
 
+permissions: {}
+
 jobs:
   stale:
     runs-on: ubuntu-latest

.github/workflows/sync-localazy.yml

@@ -5,6 +5,8 @@ on:
     # At 00:00 on every Monday UTC
     - cron: '0 0 * * 1'
 
+permissions: {}
+
 jobs:
   sync-localazy:
     runs-on: ubuntu-latest

.github/workflows/sync-sas-strings.yml

@@ -5,6 +5,8 @@ on:
     # At 00:00 on every Monday UTC
     - cron: '0 0 * * 1'
 
+permissions: {}
+
 jobs:
   sync-sas-strings:
     runs-on: ubuntu-latest

.github/workflows/tests.yml

@@ -7,6 +7,8 @@ on:
   push:
     branches: [ main, develop ]
 
+permissions: {}
+
 # Enrich gradle.properties for CI/CD
 env:
   GRADLE_OPTS: -Dorg.gradle.jvmargs="-Xmx7g -XX:MaxMetaspaceSize=512m -Dfile.encoding=UTF-8 -XX:+HeapDumpOnOutOfMemoryError" -Dkotlin.daemon.jvm.options=-Xmx2g -XX:+UseG1GC

.github/workflows/triage-incoming.yml

@@ -4,6 +4,8 @@ on:
   issues:
     types: [ opened ]
 
+permissions: {}
+
 jobs:
   triage-new-issues:
     runs-on: ubuntu-latest

.github/workflows/triage-labelled.yml

@@ -4,6 +4,8 @@ on:
   issues:
     types: [labeled]
 
+permissions: {}
+
 jobs:
   move_element_x_issues:
     name: ElementX issues to ElementX project board

.github/workflows/validate-lfs.yml

@@ -2,6 +2,8 @@ name: Validate Git LFS
 
 on: [pull_request, merge_group]
 
+permissions: {}
+
 jobs:
   build:
     runs-on: ubuntu-latest