[PM-21333] Add top level permissions key to Github workflows (#815)

* Add missing permissions key to Github workflows

* Add missing permissions

* Fix version bump permissions

.github/workflows/integration-test.yml

@@ -16,17 +16,14 @@ on:
       - "src/services/ldap-directory.service*" # we only have integration for LDAP testing at the moment
       - "./openldap/**/*" # any change to test fixtures
       - "./docker-compose.yml" # any change to Docker configuration
-
+permissions:
+  contents: read
+  checks: write # required by dorny/test-reporter to upload its results
 jobs:
-
   testing:
     name: Run tests
     if: ${{ startsWith(github.head_ref, 'version_bump_') == false }}
     runs-on: ubuntu-22.04
-    permissions:
-      checks: write
-      contents: read
-      pull-requests: write
 
     steps:
       - name: Check out repo

.github/workflows/test.yml

@@ -9,16 +9,16 @@ on:
       - "hotfix-rc"
   pull_request:
 
+permissions:
+  contents: read
+  checks: write # required by dorny/test-reporter to upload its results
+
 jobs:
 
   testing:
     name: Run tests
     if: ${{ startsWith(github.head_ref, 'version_bump_') == false }}
     runs-on: ubuntu-24.04
-    permissions:
-      checks: write
-      contents: read
-      pull-requests: write
 
     steps:
       - name: Check out repo

.github/workflows/version-bump.yml

@@ -8,6 +8,8 @@ on:
         required: false
         type: string
 
+permissions: {}
+
 jobs:
   bump_version:
     name: Bump Version