CLOUD-929 workflow does not contain permissions (#2282)

Author: hors

.github/workflows/labeler.yml

@@ -1,8 +1,10 @@
 name: "PR Labeler"
+permissions:
+  contents: read
+  pull-requests: write
 on:
   pull_request:
     types: [opened, synchronize]
-
 jobs:
   label:
     runs-on: ubuntu-latest

.github/workflows/scan.yml

@@ -1,5 +1,7 @@
 name: Scan docker
 on: [pull_request]
+permissions:
+  contents: read
 
 env:
   # Use docker.io for Docker Hub if empty

.github/workflows/stale.yml

@@ -5,6 +5,9 @@ on:
 
 jobs:
   stale:
+    permissions:
+      contents: read
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/stale@v10

.github/workflows/test.yml

@@ -1,4 +1,7 @@
 name: Run tests
+permissions:
+  contents: read
+  pull-requests: write
 on: [pull_request]
 jobs:
   test: