T6349: updated pr-labels workflow permission (#3485)

.github/workflows/add-pr-labels.yml

@@ -9,6 +9,10 @@ on:
       - equuleus
       - sagitta
 
+permissions:
+  pull-requests: write
+  contents: read
+
 jobs:
   add-pr-label:
     uses: vyos/.github/.github/workflows/add-pr-labels.yml@feature/T6349-reusable-workflows

.github/workflows/auto-author-assign.yml

@@ -3,8 +3,10 @@ on:
   pull_request_target:
     types: [opened, reopened, ready_for_review, locked]
 
+
 permissions:
   pull-requests: write
+  contents: read
 
 jobs:
   assign-author:

.github/workflows/chceck-pr-message.yml

@@ -8,6 +8,10 @@ on:
       - crux
       - equuleus
 
+permissions:
+  pull-requests: write
+  contents: read
+
 jobs:
   check-pr-title:
     uses: vyos/.github/.github/workflows/check-pr-message.yml@feature/T6349-reusable-workflows

.github/workflows/check-pr-conflicts.yml

@@ -6,6 +6,7 @@ on:
 
 permissions:
   pull-requests: write
+  contents: read
 
 jobs:
   check-pr-conflict-call:

.github/workflows/check-stale.yml

@@ -3,6 +3,10 @@ on:
   schedule:
   - cron: "0 0 * * *"
 
+permissions:
+  pull-requests: write
+  contents: read
+
 jobs:
   stale:
     uses: vyos/.github/.github/workflows/check-stale.yml@feature/T6349-reusable-workflows

.github/workflows/check-unused-imports.yml

@@ -1,11 +1,15 @@
 name: Check for unused imports using Pylint
 on:
-  pull_request_target:
+  pull_request:
     branches:
       - current
       - sagitta
+  workflow_dispatch:
+
+permissions:
+  contents: read
 
 jobs:
-  Check-Unused-Imports:
+  check-unused-imports:
     uses: vyos/.github/.github/workflows/check-unused-imports.yml@feature/T6349-reusable-workflows
     secrets: inherit

.github/workflows/label-backport.yml

@@ -2,7 +2,11 @@ name: Mergifyio backport
 
 on: [issue_comment]
 
+permissions:
+  pull-requests: write
+  contents: read
+
 jobs:
-  mergifyio_backport:
+  mergifyio-backport:
     uses: vyos/.github/.github/workflows/label-backport.yml@feature/T6349-reusable-workflows
     secrets: inherit

.github/workflows/linit-j2.yml

@@ -8,6 +8,10 @@ on:
       - crux
       - equuleus
 
+permissions:
+  pull-requests: write
+  contents: read
+
 jobs:
   j2lint:
     uses: vyos/.github/.github/workflows/lint-j2.yml@feature/T6349-reusable-workflows

src/op_mode/cgnat.py

@@ -16,7 +16,6 @@
 
 import json
 import sys
-import typing
 
 from tabulate import tabulate