Give all workflows write permissions (#1201)

Author: a-maurice

.github/workflows/build-report.yml

@@ -5,6 +5,8 @@ on:
   schedule:
     - cron: "0 13 * * *"  # 1pm UTC = 5am PST / 6am PDT, 6 hours after testapps run
 
+permissions: write-all
+
 env:
   GITHUB_TOKEN: ${{ github.token }}
   numDays: 7

.github/workflows/build_android.yml

@@ -35,6 +35,8 @@ on:
         required: false
         type: string
 
+permissions: write-all
+
 jobs:
   build_android:
     name: build-android-unity${{ inputs.unity_version }}-CPP${{ inputs.firebase_cpp_sdk_version }}

.github/workflows/build_ios.yml

@@ -35,6 +35,8 @@ on:
         required: false
         type: string
 
+permissions: write-all
+
 jobs:
   build_ios:
     name: build-ios-unity${{ inputs.unity_version }}-CPP${{ inputs.firebase_cpp_sdk_version }}

.github/workflows/build_linux.yml

@@ -35,6 +35,8 @@ on:
         required: false
         type: string
 
+permissions: write-all
+
 jobs:
   build_desktop:
     name: build-linux-unity${{inputs.unity_version}}-CPP${{ inputs.firebase_cpp_sdk_version }}

.github/workflows/build_macos.yml

@@ -35,6 +35,8 @@ on:
         required: false
         type: string
 
+permissions: write-all
+
 jobs:
   build_desktop:
     name: build-macOS-unity${{ inputs.unity_version}}-CPP${{ inputs.firebase_cpp_sdk_version }}

.github/workflows/build_starter.yml

@@ -55,6 +55,8 @@ on:
         default: '1'
         required: true
 
+permissions: write-all
+
 env:
   pythonVersion: '3.8'
 

.github/workflows/build_tvos.yml

@@ -56,6 +56,8 @@ on:
         required: true
         type: string
 
+permissions: write-all
+
 jobs:
   build_tvos:
     name: build-tvos-unity${{ inputs.unity_version }}-CPP${{ inputs.firebase_cpp_sdk_version }}

.github/workflows/build_windows.yml

@@ -35,6 +35,8 @@ on:
         required: false
         type: string
 
+permissions: write-all
+
 jobs:
   build_desktop:
     name: build-windows-unity${{inputs.unity_version}}-CPP${{ inputs.firebase_cpp_sdk_version }}

.github/workflows/generate_swig.yml

@@ -26,6 +26,8 @@ on:
         required: false
         type: string
 
+permissions: write-all
+
 jobs:
   generate_swig:
     name: generate-swig-unity${{inputs.unity_version}}-CPP${{ inputs.firebase_cpp_sdk_version }}

.github/workflows/integration_tests.yml

@@ -31,6 +31,8 @@ on:
       test_pull_request:
         description: 'Optional: Pull request # to build and test? (With optional commit hash, separated by a colon. Specify the FULL hash.)'
 
+permissions: write-all
+
 env:
   triggerLabelPrefix: "tests-requested: "
   triggerLabelFull: "tests-requested: full"

.github/workflows/retry-test-failures.yml

@@ -6,6 +6,9 @@ on:
         description: 'Run ID to check and retry'
         default: ''
         required: true
+
+permissions: write-all
+
 jobs:
   check_results_and_retry_if_needed:
     name: check-results-and-retry-if-needed