ci(atlantis): fix super-linter (#382)

.github/linters/.jscpd.json

@@ -0,0 +1,6 @@
+{
+    "ignore": [
+        "**/charts/atlantis/templates/**",
+        "**/charts/atlantis/tests/**"
+    ]
+}

.github/workflows/lint-test.yaml

@@ -10,6 +10,8 @@ defaults:
   run:
     shell: bash
 
+permissions: read-all
+
 jobs:
   lint-test:
     runs-on: ubuntu-latest

.github/workflows/linter.yaml

@@ -5,18 +5,21 @@ name: Lint Code Base
 
 on:
   pull_request:
-    paths:
-      - 'charts/atlantis/**'
+
+permissions: read-all
 
 jobs:
   build:
     name: Lint Code Base
     runs-on: ubuntu-latest
+    permissions:
+      statuses: write
     steps:
       - name: Checkout Code
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+
       - name: Lint Code Base
         uses: github/super-linter@v6
         env:

.github/workflows/release.yaml

@@ -7,9 +7,13 @@ on:
     paths:
       - 'charts/atlantis/**'
 
+permissions: read-all
+
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/stale.yml

@@ -2,9 +2,15 @@ name: Close Stale PRs
 on:
   schedule:
     - cron: '30 1 * * *'
+
+permissions: read-all
+
 jobs:
   stale:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
     steps:
       - uses: actions/stale@v9
         with: