[AA-1769] Improve Workflow Permissions

.github/workflows/aa-e2e.yml

@@ -18,6 +18,8 @@ on:
       - ".github/workflows/aa-e2e.yml"
       - "!Application/EdFi.Ods.Admin.Api" # Need to remove this extra check after we remove EdFi.Ods.Admin.Api project
 
+permissions: read-all
+
 jobs:
   run-e2e-tests:
     runs-on: ubuntu-latest

.github/workflows/after-pullrequest.yml

@@ -11,6 +11,8 @@ on:
     types:
       - completed
 
+permissions: read-all
+
 jobs:
   report-test-results:
     name: Report Test Results

.github/workflows/e2e-reports.yml

@@ -10,6 +10,8 @@ on:
     types:
       - completed
 
+permissions: read-all
+
 env:
   JIRA_ACCESS_TOKEN: ${{ secrets.JIRA_ACCESS_TOKEN }}
   ADMIN_APP_VERSION: "3.0.0"

.github/workflows/on-merge-or-tag.yml

@@ -11,6 +11,8 @@ on:
     tags:
       - "v*.*.*"
 
+permissions: read-all
+
 env:
   API_URL: https://api.github.com/repos/${{ github.repository }}
   TOKEN: ${{ secrets.EDFI_BUILD_AGENT_PAT }}

.github/workflows/on-prerelease.yml

@@ -9,6 +9,8 @@ on:
     types:
       - prereleased
 
+permissions: read-all
+
 env:
   ARTIFACTS_API_KEY: ${{ secrets.AZURE_ARTIFACTS_PERSONAL_ACCESS_TOKEN }}
   ARTIFACTS_FEED_URL: "https://pkgs.dev.azure.com/ed-fi-alliance/Ed-Fi-Alliance-OSS/_packaging/EdFi/nuget/v3/index.json"

.github/workflows/on-pullrequest-dockerfile.yml

@@ -20,6 +20,8 @@ on:
       - "Docker/*"
   workflow_dispatch:
 
+permissions: read-all
+
 jobs:
   docker-testing:
     runs-on: ubuntu-latest
@@ -39,4 +41,4 @@ jobs:
         name: Run Linter on ${{ matrix.dockerfile.name }} Dockerfile
         with:
           dockerfile: ${{ matrix.dockerfile.path }}
-          failure-threshold: error
+          failure-threshold: error

.github/workflows/on-pullrequest.yml

@@ -21,6 +21,8 @@ on:
       - ".github/**/*.yml"
   workflow_dispatch:
 
+permissions: read-all
+
 jobs:
   # TODO: restore this with AA-1601
   # run-ps-lint:

.github/workflows/on-release.yml

@@ -9,6 +9,8 @@ on:
     types:
       - released
 
+permissions: read-all
+
 env:
   ARTIFACTS_API_KEY: ${{ secrets.AZURE_ARTIFACTS_PERSONAL_ACCESS_TOKEN }}
   ARTIFACTS_FEED_URL: "https://pkgs.dev.azure.com/ed-fi-alliance/Ed-Fi-Alliance-OSS/_packaging/EdFi/nuget/v3/index.json"
@@ -20,6 +22,8 @@ jobs:
   delete-pre-releases:
     name: Delete Unnecessary Pre-Releases
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Checkout the repo
         uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
@@ -74,4 +78,3 @@ jobs:
 
           Import-Module ./eng/promote-packages.psm1
           Invoke-Promote @arguments
-

README.md

@@ -43,7 +43,7 @@ knowledge of the code base and architecture.
 
 ## Legal Information
 
-Copyright (c) 2020 Ed-Fi Alliance, LLC and contributors.
+Copyright (c) 2024 Ed-Fi Alliance, LLC and contributors.
 
 Licensed under the [Apache License, Version 2.0](LICENSE) (the "License").