chore(ci): Add statuses write permission to workflows (#21788)

Signed-off-by: Jesse Szwedko <jesse.szwedko@datadoghq.com>

Author: jszwedko

.github/workflows/ci-integration-review.yml

@@ -32,6 +32,9 @@ on:
   pull_request_review:
     types: [submitted]
 
+permissions:
+  statuses: write
+
 env:
   AWS_ACCESS_KEY_ID: "dummy"
   AWS_SECRET_ACCESS_KEY: "dummy"

.github/workflows/ci-review-trigger.yml

@@ -26,6 +26,9 @@ on:
   pull_request_review:
     types: [submitted]
 
+permissions:
+  statuses: write
+
 env:
   DD_ENV: "ci"
   RUST_BACKTRACE: full

.github/workflows/cli.yml

@@ -3,6 +3,9 @@ name: CLI - Linux
 on:
   workflow_call:
 
+permissions:
+  statuses: write
+
 jobs:
   test-cli:
     runs-on: ubuntu-latest

.github/workflows/component_features.yml

@@ -16,6 +16,9 @@ on:
     # At midnight UTC Tue-Sat
     - cron: '0 0 * * 2-6'
 
+permissions:
+  statuses: write
+
 jobs:
   check-component-features:
     # use free tier on schedule and 8 core to expedite results on demand invocation

.github/workflows/cross.yml

@@ -3,6 +3,9 @@ name: Cross
 on:
   workflow_call:
 
+permissions:
+  statuses: write
+
 jobs:
   cross-linux:
     name: Cross - ${{ matrix.target }}

.github/workflows/deny.yml

@@ -16,6 +16,9 @@ on:
     # At midnight UTC
     - cron: '0 0 * * *'
 
+permissions:
+  statuses: write
+
 jobs:
   test-deny:
     runs-on: ubuntu-latest

.github/workflows/e2e.yml

@@ -16,6 +16,9 @@ on:
     # At midnight UTC Tue-Sat
     - cron: '0 0 * * 2-6'
 
+permissions:
+  statuses: write
+
 concurrency:
   # `github.event.number` exists for pull requests, otherwise fall back to SHA for merge queue
   group: ${{ github.workflow }}-${{ github.event.number || github.event.merge_group.head_sha }}

.github/workflows/environment.yml

@@ -11,6 +11,9 @@ env:
   VERBOSE: true
   CI: true
 
+permissions:
+  statuses: write
+
 jobs:
   publish-new-environment:
     runs-on: ubuntu-20.04

.github/workflows/install-sh.yml

@@ -4,6 +4,9 @@ on:
   workflow_call:
   workflow_dispatch:
 
+permissions:
+  statuses: write
+
 jobs:
   test-install:
     runs-on: ubuntu-20.04

.github/workflows/k8s_e2e.yml

@@ -14,6 +14,9 @@
 
 name: K8S E2E Suite
 
+permissions:
+  statuses: write
+
 on:
   workflow_dispatch:
   workflow_call:

.github/workflows/misc.yml

@@ -3,6 +3,9 @@ name: Miscellaneous - Linux
 on:
   workflow_call:
 
+permissions:
+  statuses: write
+
 jobs:
   test-misc:
     runs-on: ubuntu-20.04

.github/workflows/unit_mac.yml

@@ -3,6 +3,9 @@ name: Unit - Mac
 on:
   workflow_call:
 
+permissions:
+  statuses: write
+
 jobs:
   unit-mac:
     runs-on: macos-13

.github/workflows/unit_windows.yml

@@ -3,6 +3,9 @@ name: Unit - Windows
 on:
   workflow_call:
 
+permissions:
+  statuses: write
+
 jobs:
 
   test-windows: