Set appropriate permissions to all Github Actions workflows

[iMicknl]

Potential fix for https://github.com/iMicknl/python-overkiz-api/security/code-scanning/19

In general, the fix is to explicitly declare a permissions block in the workflow, restricting the GITHUB_TOKEN to the minimum scope required. For this test workflow, read-only access to repository contents is sufficient, so contents: read at the top level is appropriate. This documents the intended permissions, avoids accidental write access if organization defaults are broad, and applies to all jobs that do not override permissions.

The best concrete fix here is to add a root-level permissions: block just after the name: test line in .github/workflows/test.yml. This will apply contents: read to the entire workflow, including the pytest job. No existing steps need to be changed, and no additional imports or actions are required because actions/checkout and the other used actions work with read-only contents. Only this YAML file needs updating, and the change is limited to inserting the new permissions section.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[Copilot]

Pull request overview

Adds explicit permissions blocks to GitHub Actions workflows to address code scanning alert #19 by restricting the default GITHUB_TOKEN scope to the minimum required.

Changes:

• Set workflow-level permissions: contents: read for test and lint workflows.
• Set workflow-level permissions for pr-labeler to allow PR labeling while keeping repo contents read-only.
• Add job-level permissions for release-drafter to allow updating release drafts.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/test.yml	Adds top-level permissions with contents: read for the test workflow.
.github/workflows/lint.yaml	Adds top-level permissions with contents: read for the lint workflow.
.github/workflows/pr-labeler.yml	Adds top-level permissions (contents: read, pull-requests: write) for PR labeling.
.github/workflows/release-drafter.yml	Adds job-level permissions to allow release draft updates.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.