Merge branch 'main' into feature/CodeGen_CodeTrans_k8s

Author: ZePan110

.github/workflows/_get-test-matrix.yml

@@ -3,7 +3,17 @@
 
 # Support push and pull_request events
 name: Get Test Matrix
-permissions: read-all
+permissions:
+  actions: read
+  contents: read
+  checks: read
+  deployments: read
+  issues: read
+  packages: read
+  pages: read
+  pull-requests: read
+  statuses: read
+  security-events: read
 on:
   workflow_call:
     inputs:

.github/workflows/_run-docker-compose.yml

@@ -2,7 +2,17 @@
 # SPDX-License-Identifier: Apache-2.0
 
 name: Image Build
-permissions: read-all
+permissions:
+  actions: read
+  contents: read
+  checks: write
+  deployments: write
+  issues: write
+  packages: write
+  pages: write
+  pull-requests: write
+  statuses: write
+  security-events: read
 on:
   workflow_call:
     inputs:

.github/workflows/pr-docker-compose-e2e.yml

@@ -28,12 +28,34 @@ concurrency:
 
 jobs:
   get-test-matrix:
+    permissions:
+      actions: read
+      contents: read
+      checks: read
+      deployments: read
+      issues: read
+      packages: read
+      pages: read
+      pull-requests: read
+      statuses: read
+      security-events: read
     if: ${{ !github.event.pull_request.draft }}
     uses: ./.github/workflows/_get-test-matrix.yml
     with:
       diff_excluded_files: '\.github|\.md|\.txt|kubernetes|gmc|assets|benchmark'
 
   example-test:
+    permissions:
+      actions: read
+      contents: read
+      checks: write
+      deployments: write
+      issues: write
+      packages: write
+      pages: write
+      pull-requests: write
+      statuses: write
+      security-events: read
     needs: [get-test-matrix]
     if: ${{ needs.get-test-matrix.outputs.run_matrix != '' }}
     strategy: