Merge pull request helm#13259 from harshitasao/scorecard-checks-fix

fix: fixed the token-permission and pinned-dependencies issue

.github/workflows/build-test.yml

@@ -8,6 +8,9 @@ on:
     branches:
       - main
 
+permissions:  
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest

.github/workflows/codeql-analysis.yml

@@ -20,6 +20,9 @@ on:
   schedule:
     - cron: '29 6 * * 6'
 
+permissions:  
+  contents: read
+
 jobs:
   analyze:
     name: Analyze

.github/workflows/golangci-lint.yml

@@ -4,6 +4,9 @@ on:
   push:
   pull_request:
 
+permissions:  
+  contents: read
+
 jobs:
   golangci:
     name: golangci-lint

.github/workflows/stale-issue-bot.yaml

@@ -2,11 +2,14 @@ name: "Close stale issues"
 on:
   schedule:
   - cron: "0 0 * * *"
+permissions:  
+  contents: read
+
 jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/[email protected]
+    - uses: actions/stale@87c2b794b9b47a9bec68ae03c01aeb572ffebdb1 # v3.0.14
       with:
         repo-token: ${{ secrets.GITHUB_TOKEN }}
         stale-issue-message: 'This issue has been marked as stale because it has been open for 90 days with no activity. This thread will be automatically closed in 30 days if no further activity occurs.'