From fc799a0c77f611d6957b8d3b7176af33c215b21a Mon Sep 17 00:00:00 2001
From: Nir Azkiel <nir.azkiel@intel.com>
Date: Sun, 7 Jan 2024 17:38:07 +0200
Subject: [PATCH] set top level permissions to read-all

(cherry picked from commit 490e06c01e29108846696af0f52c61d59cd7c844)
---
 .github/workflows/build-ROS2-package-CI.yaml | 2 ++
 .github/workflows/buildsCI.yaml              | 2 ++
 .github/workflows/static_analysis.yaml       | 2 ++
 3 files changed, 6 insertions(+)

diff --git a/.github/workflows/build-ROS2-package-CI.yaml b/.github/workflows/build-ROS2-package-CI.yaml
index d78e7b5876..bfc68ddd79 100644
--- a/.github/workflows/build-ROS2-package-CI.yaml
+++ b/.github/workflows/build-ROS2-package-CI.yaml
@@ -6,6 +6,8 @@ on:
   pull_request:
     branches: ['**']
 
+permissions: read-all
+
 jobs:
 
   build_lrs_ros2_package:
diff --git a/.github/workflows/buildsCI.yaml b/.github/workflows/buildsCI.yaml
index e4dae2a54e..894c60c729 100644
--- a/.github/workflows/buildsCI.yaml
+++ b/.github/workflows/buildsCI.yaml
@@ -5,6 +5,8 @@ on:
     branches: ['**']
   pull_request:
     branches: ['**']
+
+permissions: read-all
      
 env:
   # Customize the CMake build type here (Release, Debug, RelWithDebInfo, etc.)  
diff --git a/.github/workflows/static_analysis.yaml b/.github/workflows/static_analysis.yaml
index 62df9ea63a..541e94c182 100644
--- a/.github/workflows/static_analysis.yaml
+++ b/.github/workflows/static_analysis.yaml
@@ -5,6 +5,8 @@ on:
     branches: ['**']
   pull_request:
     branches: ['**']
+    
+permissions: read-all
 
 jobs:
   cppcheck: