ci: reduce the permissions for github actions jobs (#375)

.github/workflows/develop.yml

@@ -11,6 +11,8 @@ jobs:
     steps:
       - name: Checkout action
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Setup the Node runtime for this project
         uses: actions/setup-node@v4
         with:

.github/workflows/publish.yml

@@ -8,10 +8,13 @@ jobs:
   build:
     name: Build and tag a new version
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Checkout the current code
         uses: actions/checkout@v4
         with:
+          persist-credentials: false
           ref: ${{ github.event.release.tag_name }}
 
       - name: Configure the runtime node

.github/workflows/test.yml

@@ -11,10 +11,13 @@ jobs:
     name: Run tests
     runs-on: ubuntu-latest
     environment: staging
+    permissions:
+      checks: write
     steps:
       - name: "build: checkout the latest changes"
         uses: actions/checkout@v4
         with:
+          persist-credentials: false
           ref: ${{ github.event.pull_request.head.sha }}
 
       - name: "build: setup the node runtime"
@@ -226,7 +229,7 @@ jobs:
       - name: "chore(health): check up on recent changes to the health score"
         uses: slackapi/[email protected]
         with:
-          codecov_token: ${{ secrets.CODECOV_TOKEN }}
+          codecov_token: ${{ secrets.CODECOV_API_TOKEN }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
           extension: js
           include: src