chore: address remaining scorecard findings (#155)

Author: Kenneth Rosario

.github/workflows/buildpack-integration-test.yml

@@ -5,6 +5,10 @@ on:
     branches:
       - main
   workflow_dispatch:
+
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   ruby30-buildpack-test:
     uses: GoogleCloudPlatform/functions-framework-conformance/.github/workflows/buildpack-integration-test.yml@v1.8.0

.github/workflows/conformance.yml

@@ -7,6 +7,10 @@ on:
     branches:
       - main
   workflow_dispatch:
+
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   conformance:
     runs-on: ubuntu-latest

.github/workflows/push-gh-pages.yml

@@ -4,11 +4,16 @@ on:
   release:
     types: [published]
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   push-gh-pages:
     env:
       ruby_version: "3.0"
     runs-on: ubuntu-latest
+    permissions:
+      pages: write
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 # v2.1.0