ci: fix ghalint

Author: guitarrapc

.github/workflows/build-main.yaml

@@ -11,7 +11,10 @@ on:
 jobs:
   build-debug:
     name: Build and run tests
-    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
     steps:
       - uses: Cysharp/Actions/.github/actions/checkout@main
       - uses: Cysharp/Actions/.github/actions/setup-dotnet@main
@@ -28,7 +31,10 @@ jobs:
   test-release-build:
     name: Run tests using Release build
     needs: [ build-debug ]
-    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
     steps:
       - uses: Cysharp/Actions/.github/actions/checkout@main
       - uses: Cysharp/Actions/.github/actions/setup-dotnet@main

.github/workflows/build-release.yml .github/workflows/build-release.yaml.github/workflows/build-release.yml renamed to .github/workflows/build-release.yaml

@@ -14,7 +14,10 @@ on:
 
 jobs:
   build-dotnet:
-    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
     steps:
       - uses: Cysharp/Actions/.github/actions/checkout@main
       - uses: Cysharp/Actions/.github/actions/setup-dotnet@main
@@ -30,6 +33,8 @@ jobs:
 
   create-release:
     needs: [build-dotnet]
+    permissions:
+      contents: write
     uses: Cysharp/Actions/.github/workflows/create-release.yaml@main
     with:
       commit-id: ${{ github.sha }}

.github/workflows/stale.yml .github/workflows/stale.yaml.github/workflows/stale.yml renamed to .github/workflows/stale.yaml

@@ -7,4 +7,8 @@ on:
 
 jobs:
   stale:
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
     uses: Cysharp/Actions/.github/workflows/stale-issue.yaml@main