Update other workflows.

Author: jonsimantov

.github/workflows/checks.yml

@@ -4,6 +4,8 @@ on:
   pull_request:
     types: [opened, reopened, synchronize, labeled, unlabeled]
 
+permissions: write-all
+
 env:
   triggerLabelFull: "tests-requested: full"
   triggerLabelQuick: "tests-requested: quick"

.github/workflows/checks_secure.yml

@@ -5,6 +5,8 @@ on:
   pull_request_target:
     types: [synchronize]
 
+permissions: write-all
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
   cancel-in-progress: true

.github/workflows/update-feature-branches.yml

@@ -13,6 +13,8 @@ on:
   schedule:
     - cron: "0 16 * * 1"  # Mondays, 4pm UTC = 9am PST / 10am PDT
 
+permissions: write-all
+
 env:
   defaultBranchPattern: "feature_branch/*"
   defaultMainBranch: "main"