fix: fix perms for validate pr title and ossf scorecard (#2)

Author: Lstedmanfalls

.github/workflows/check-community-approval.yaml

@@ -3,8 +3,6 @@
 
 name: check-community-approval
 on: workflow_call
-permissions:
-  contents: read
 
 jobs:
   check-community-approval:

.github/workflows/check-pr-thumbs-up.yaml

@@ -3,8 +3,6 @@
 
 name: check-pr-thumbs-up
 on: workflow_call
-permissions:
-  contents: read
 
 jobs:
   check-pr-thumbs-up:

.github/workflows/ossf-scorecard.yaml

@@ -1,11 +1,10 @@
 # Required Permissions:
+#   contents: read
 #   security-events: write
 #   id-token: write
 
 name: ossf-scorecard
 on: workflow_call
-permissions:
-  contents: read
 
 jobs:
   ossf-scorecard:

.github/workflows/semver-release.yaml

@@ -6,8 +6,6 @@
 
 name: semver-release
 on: workflow_call
-permissions:
-  contents: read
 
 jobs:
   semver-release:

.github/workflows/validate-pr-title.yaml

@@ -3,8 +3,6 @@
 
 name: validate-pr-title
 on: workflow_call
-permissions:
-  contents: read
 
 jobs:
   validate-pr-title:

.github/workflows/z_local_ossf-scorecard.yaml

@@ -9,6 +9,7 @@ jobs:
   ossf-scorecard:
     name: ossf-scorecard
     permissions:
+      contents: read
       security-events: write
       id-token: write
     uses: ./.github/workflows/ossf-scorecard.yaml

.github/workflows/z_local_validate-pr-title.yaml

@@ -11,6 +11,7 @@ jobs:
   validate-pr-title:
     name: validate-pr-title
     permissions:
+      contents: read
       pull-requests: read
     uses: ./.github/workflows/validate-pr-title.yaml
     secrets: inherit